ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Local Admin PW

    Scheduled Pinned Locked Moved IT Discussion
    35 Posts 10 Posters 2.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • scottalanmillerS
      scottalanmiller @jmoore
      last edited by

      @jmoore said in Local Admin PW:

      Question to you all: is there a good way to change the local admin pw on several hundred machines?

      Salt, Ansible, Chef, Puppet, et al.

      jmooreJ 1 Reply Last reply Reply Quote 1
      • jmooreJ
        jmoore @scottalanmiller
        last edited by

        @scottalanmiller I haven't used any of those yet. Are they something like chocolatey but with more features? Do you have a recommendation on which to use with a college that has 700-800 users?

        scottalanmillerS 1 Reply Last reply Reply Quote 0
        • scottalanmillerS
          scottalanmiller @jmoore
          last edited by

          @jmoore said in Local Admin PW:

          @scottalanmiller I haven't used any of those yet. Are they something like chocolatey but with more features? Do you have a recommendation on which to use with a college that has 700-800 users?

          They are DevOps style state tool systems. Any of them are fine. Ansible is probably the easiest to use.

          jmooreJ 1 Reply Last reply Reply Quote 0
          • jmooreJ
            jmoore @scottalanmiller
            last edited by

            @scottalanmiller Ok thanks I will start my research on them

            1 Reply Last reply Reply Quote 0
            • dafyreD
              dafyre
              last edited by

              Since you are already able to manage the Local Admin PW on the machines via GPO, why change?

              jmooreJ 1 Reply Last reply Reply Quote 0
              • scottalanmillerS
                scottalanmiller @jmoore
                last edited by

                @jmoore said in Local Admin PW:

                i asked what would happen if i just started changing it and my boss said the group policy would just change it back.

                That'll happen no matter what tool you use. They will fight over the change.

                dafyreD 1 Reply Last reply Reply Quote 0
                • dafyreD
                  dafyre @scottalanmiller
                  last edited by

                  @scottalanmiller said in Local Admin PW:

                  @jmoore said in Local Admin PW:

                  i asked what would happen if i just started changing it and my boss said the group policy would just change it back.

                  That'll happen no matter what tool you use. They will fight over the change.

                  I would expect GPO or Salt to ultimately win.

                  scottalanmillerS 1 Reply Last reply Reply Quote 0
                  • scottalanmillerS
                    scottalanmiller @dafyre
                    last edited by

                    @dafyre said in Local Admin PW:

                    @scottalanmiller said in Local Admin PW:

                    @jmoore said in Local Admin PW:

                    i asked what would happen if i just started changing it and my boss said the group policy would just change it back.

                    That'll happen no matter what tool you use. They will fight over the change.

                    I would expect GPO or Salt to ultimately win.

                    No, they go back and forth on their cycles.

                    1 Reply Last reply Reply Quote 0
                    • jmooreJ
                      jmoore @dafyre
                      last edited by

                      @dafyre My boss told me that microsoft took away the ability to change the passwords via gpo because of some issue where they were being sent in plain text. I have no way to verify but thats what he told me

                      scottalanmillerS dafyreD coliverC Mike DavisM 4 Replies Last reply Reply Quote 1
                      • scottalanmillerS
                        scottalanmiller @jmoore
                        last edited by

                        @jmoore said in Local Admin PW:

                        @dafyre My boss told me that microsoft took away the ability to change the passwords via gpo because of some issue where they were being sent in plain text. I have no way to verify but thats what he told me

                        But he also told you that it was still happening. Can't be both.

                        jmooreJ F 2 Replies Last reply Reply Quote 1
                        • dafyreD
                          dafyre @jmoore
                          last edited by

                          @jmoore said in Local Admin PW:

                          @dafyre My boss told me that microsoft took away the ability to change the passwords via gpo because of some issue where they were being sent in plain text. I have no way to verify but thats what he told me

                          Seems like I remember hearing about that somewhere. Salt can do this, but I've not tested it on Windows yet.

                          scottalanmillerS 1 Reply Last reply Reply Quote 0
                          • scottalanmillerS
                            scottalanmiller @dafyre
                            last edited by

                            @dafyre said in Local Admin PW:

                            @jmoore said in Local Admin PW:

                            @dafyre My boss told me that microsoft took away the ability to change the passwords via gpo because of some issue where they were being sent in plain text. I have no way to verify but thats what he told me

                            Seems like I remember hearing about that somewhere. Salt can do this, but I've not tested it on Windows yet.

                            Yes, Salt definitely can.

                            1 Reply Last reply Reply Quote 0
                            • jmooreJ
                              jmoore @scottalanmiller
                              last edited by

                              @scottalanmiller said in Local Admin PW:

                              @jmoore said in Local Admin PW:

                              @dafyre My boss told me that microsoft took away the ability to change the passwords via gpo because of some issue where they were being sent in plain text. I have no way to verify but thats what he told me

                              But he also told you that it was still happening. Can't be both.

                              your exactly right. I see the dichotomy there. I guess i don't understand what he meant.

                              1 Reply Last reply Reply Quote 0
                              • dbeatoD
                                dbeato
                                last edited by

                                If you are in a Windows Environment take a look at LAPS
                                https://technet.microsoft.com/en-us/mt227395.aspx

                                jmooreJ 1 Reply Last reply Reply Quote 0
                                • ObsolesceO
                                  Obsolesce
                                  last edited by Obsolesce

                                  I was thinking some kind of PS script would work... first result of a search lead to this, which looks promising:

                                  http://beta.itprotoday.com/management-mobility/resetting-local-administrator-password-computers

                                  scottalanmillerS jmooreJ 2 Replies Last reply Reply Quote 0
                                  • scottalanmillerS
                                    scottalanmiller @Obsolesce
                                    last edited by

                                    @tim_g said in Local Admin PW:

                                    I was thinking some kind of PS script would work... first result of a search lead to this, which looks promising:

                                    PS could definitely do it.

                                    1 Reply Last reply Reply Quote 0
                                    • jmooreJ
                                      jmoore @Obsolesce
                                      last edited by

                                      @tim_g said in Local Admin PW:

                                      I was thinking some kind of PS script would work... first result of a search lead to this, which looks promising:

                                      http://beta.itprotoday.com/management-mobility/resetting-local-administrator-password-computers

                                      thanks tim, checking that out too

                                      1 Reply Last reply Reply Quote 0
                                      • jmooreJ
                                        jmoore @dbeato
                                        last edited by

                                        @dbeato said in Local Admin PW:

                                        If you are in a Windows Environment take a look at LAPS
                                        https://technet.microsoft.com/en-us/mt227395.aspx

                                        thanks dbeato, i will look at that

                                        1 Reply Last reply Reply Quote 1
                                        • F
                                          flaxking @scottalanmiller
                                          last edited by flaxking

                                          @scottalanmiller said in Local Admin PW:

                                          @jmoore said in Local Admin PW:

                                          @dafyre My boss told me that microsoft took away the ability to change the passwords via gpo because of some issue where they were being sent in plain text. I have no way to verify but thats what he told me

                                          But he also told you that it was still happening. Can't be both.

                                          Are you sure it can't be? My guess is that whatever update removes this ability might not remove an existing GPO with it already setup (in which case there probably is a hacky way to change the password). Or maybe his boss just thinks it is still happening, I couldn't really tell you.

                                          DustinB3403D scottalanmillerS jmooreJ 3 Replies Last reply Reply Quote 0
                                          • DustinB3403D
                                            DustinB3403 @flaxking
                                            last edited by

                                            @flaxking said in Local Admin PW:

                                            @scottalanmiller said in Local Admin PW:

                                            @jmoore said in Local Admin PW:

                                            @dafyre My boss told me that microsoft took away the ability to change the passwords via gpo because of some issue where they were being sent in plain text. I have no way to verify but thats what he told me

                                            But he also told you that it was still happening. Can't be both.

                                            Are you sure it can't be? My guess is that whatever update removes this ability might not remove an existing GPO with it already setup. Or maybe his boss just thinks it is still happening, I couldn't really tell you.

                                            There would be an easy way to test.

                                            Change the password locally, reboot, perform a gpupdate and see if the old password works again.

                                            jmooreJ 1 Reply Last reply Reply Quote 1
                                            • 1
                                            • 2
                                            • 1 / 2
                                            • First post
                                              Last post