Change Local Admin Pwd?

siringo

@JasGot said in Change Local Admin Pwd?:

@siringo said in Change Local Admin Pwd?:

Thanks for any help.

Do you know that your domain admin account can login?
Yep it can log onto/into all domain PCs.

Have you tried Intelliadmin?
No. I do have Teamviewer though.

siringo

@JasGot said in Change Local Admin Pwd?:

@siringo said in Change Local Admin Pwd?:

? How can I find out?

Post the answer to this command from an elevated cmd prompt:

wmic /NODE:"servername or IP Address" /USER:"yourdomain\administrator" OS GET Name

It will prompt you for the password.

I ran that on one of the remote PCs and yes it did prompt for a password. Was that what you were after?

manxam

@siringo : If you have teamviewer, why not run this from the command line backend?

net user adminUserName password

You only have approximately 20 computers so it shouldn't take more than a few minutes.

If you have to create a new admin account :

net user adminUserName password /add
net localgroup adaministrators adminUserName /add

JasGot

@siringo said in Change Local Admin Pwd?:

I ran that on one of the remote PCs and yes it did prompt for a password. Was that what you were after?

Did you give it the password? Did it correctly respond with the os?

JasGot

@manxam said in Change Local Admin Pwd?:

@siringo : If you have teamviewer, why not run this from the command line backend?
net user adminUserName password
You only have approximately 20 computers so it shouldn't take more than a few minutes.

If you have to create a new admin account :
net user adminUserName password /add
net localgroup adaministrators adminUserName /add

This will do it.

siringo

@manxam said in Change Local Admin Pwd?:

@siringo : If you have teamviewer, why not run this from the command line backend?
net user adminUserName password
You only have approximately 20 computers so it shouldn't take more than a few minutes.

If you have to create a new admin account :
net user adminUserName password /add
net localgroup adaministrators adminUserName /add

Sorry, what's the command line backend? I'm running TV v10. AFAIK I have to log into each PC, run CMD type in the command and log off.

I was hoping for something a little less laborious.

JasGot

@siringo said in Change Local Admin Pwd?:

Sorry, what's the command line backend?

If you are more familiar with GPO, set a STARTUP script (Not a logon script) (startup and shutdown scripts run with system privileges) to run those two commands: net user and net localgroup, then reboot (or wait for reboot) the PC.

siringo

Thanks for the help fellas, I'll throw some brain power behind it and see what I end up with.

manxam

@siringo said in Change Local Admin Pwd?:

I was hoping for something a little less laborious.

Most RMMs have the ability to run a command without logging into the GUI. I haven't used TV but just assumed that it would offer this as well. I could be wrong...

scottalanmiller

@manxam said in Change Local Admin Pwd?:

@siringo said in Change Local Admin Pwd?:

I was hoping for something a little less laborious.

Most RMMs have the ability to run a command without logging into the GUI. I haven't used TV but just assumed that it would offer this as well. I could be wrong...

AFAIK it doesn't, but it might. ScreenConnect, MeshCentral, Salt, etc. all do.

scottalanmiller

That's one of the most important features of tools like that. We use it as much as the remote screen access.

manxam

@scottalanmiller said in Change Local Admin Pwd?:

That's one of the most important features of tools like that. We use it as much as the remote screen access.

Agreed!

Emad R

@siringo

saltstack, best CM with windows support

siringo

@Emad-R said in Change Local Admin Pwd?:

@siringo

saltstack, best CM with windows support

just spent 6 seconds looking at the web site, looks too complex for my needs. Too many big scarey buzzwords.

JaredBusch

@siringo said in Change Local Admin Pwd?:

@Emad-R said in Change Local Admin Pwd?:

@siringo

saltstack, best CM with windows support

just spent 6 seconds looking at the web site, looks too complex for my needs. Too many big scarey buzzwords.

https://www.mangolassi.it/topic/19681/creating-a-salt-master-on-fedora-30

scottalanmiller

@siringo said in Change Local Admin Pwd?:

@Emad-R said in Change Local Admin Pwd?:

@siringo

saltstack, best CM with windows support

just spent 6 seconds looking at the web site, looks too complex for my needs. Too many big scarey buzzwords.

SS can do a lot. It can also be a simple way to run remote commands

wrx7m

Can you use the netuser command via bat file, deployed using group policy startup script?

JasGot

@wrx7m said in Change Local Admin Pwd?:

Can you use the netuser command via bat file, deployed using group policy startup script?

That looks familiar.

Emad R

@siringo

I felt the same at SS, but do you want to always look for tools or do you want one tool that can do everything, think about that and listen to this while you do

Youtube Video

black3dynamite

@siringo said in Change Local Admin Pwd?:

@Emad-R said in Change Local Admin Pwd?:

@siringo

saltstack, best CM with windows support

just spent 6 seconds looking at the web site, looks too complex for my needs. Too many big scarey buzzwords.

After you have installed and configured the initial setup for the salt-master and salt-minion its somewhat pretty straight forward.

Create your adminuserpass.ps1 file in /srv/salt/ with something like this within the file

$AdminPlainPass = "Whos-Your-Daddy1"
$AdminSecurePass = $AdminPlainPass | ConvertTo-SecureString -AsPlainText -Force

Set-LocalUser -Name 'adminuser' -Password $AdminSecurePass

Create your adminuserpass.sls file in /srv/salt/ with something like this within the file

adminuserpass:
  cmd.script:
    - source: salt://adminuserpass.ps1
    - shell: powershell
    - env:
      - ExecutionPolicy: "bypass"

Run the salt command with something like this.

salt 'saltminion-host' state.apply adminuserpass