ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Change Local Admin Pwd?

    Scheduled Pinned Locked Moved IT Discussion
    31 Posts 9 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • scottalanmillerS
      scottalanmiller
      last edited by

      That's one of the most important features of tools like that. We use it as much as the remote screen access.

      M 1 Reply Last reply Reply Quote 1
      • M
        manxam @scottalanmiller
        last edited by

        @scottalanmiller said in Change Local Admin Pwd?:

        That's one of the most important features of tools like that. We use it as much as the remote screen access.

        Agreed!

        1 Reply Last reply Reply Quote 0
        • Emad RE
          Emad R @siringo
          last edited by Emad R

          @siringo

          saltstack, best CM with windows support

          siringoS 1 Reply Last reply Reply Quote 0
          • siringoS
            siringo @Emad R
            last edited by

            @Emad-R said in Change Local Admin Pwd?:

            @siringo

            saltstack, best CM with windows support

            just spent 6 seconds looking at the web site, looks too complex for my needs. Too many big scarey buzzwords.

            JaredBuschJ scottalanmillerS black3dynamiteB 3 Replies Last reply Reply Quote 0
            • JaredBuschJ
              JaredBusch @siringo
              last edited by

              @siringo said in Change Local Admin Pwd?:

              @Emad-R said in Change Local Admin Pwd?:

              @siringo

              saltstack, best CM with windows support

              just spent 6 seconds looking at the web site, looks too complex for my needs. Too many big scarey buzzwords.

              https://www.mangolassi.it/topic/19681/creating-a-salt-master-on-fedora-30

              1 Reply Last reply Reply Quote 1
              • scottalanmillerS
                scottalanmiller @siringo
                last edited by

                @siringo said in Change Local Admin Pwd?:

                @Emad-R said in Change Local Admin Pwd?:

                @siringo

                saltstack, best CM with windows support

                just spent 6 seconds looking at the web site, looks too complex for my needs. Too many big scarey buzzwords.

                SS can do a lot. It can also be a simple way to run remote commands 🙂

                1 Reply Last reply Reply Quote 0
                • wrx7mW
                  wrx7m
                  last edited by wrx7m

                  Can you use the netuser command via bat file, deployed using group policy startup script?
                  87a3817a-2c8e-44cf-814f-be50e34bbd4f-image.png

                  J 1 Reply Last reply Reply Quote 0
                  • J
                    JasGot @wrx7m
                    last edited by

                    @wrx7m said in Change Local Admin Pwd?:

                    Can you use the netuser command via bat file, deployed using group policy startup script?
                    87a3817a-2c8e-44cf-814f-be50e34bbd4f-image.png

                    That looks familiar.

                    1 Reply Last reply Reply Quote 0
                    • Emad RE
                      Emad R @siringo
                      last edited by

                      @siringo

                      I felt the same at SS, but do you want to always look for tools or do you want one tool that can do everything, think about that and listen to this while you do

                      Youtube Video

                      1 Reply Last reply Reply Quote 0
                      • black3dynamiteB
                        black3dynamite @siringo
                        last edited by black3dynamite

                        @siringo said in Change Local Admin Pwd?:

                        @Emad-R said in Change Local Admin Pwd?:

                        @siringo

                        saltstack, best CM with windows support

                        just spent 6 seconds looking at the web site, looks too complex for my needs. Too many big scarey buzzwords.

                        After you have installed and configured the initial setup for the salt-master and salt-minion its somewhat pretty straight forward.

                        Create your adminuserpass.ps1 file in /srv/salt/ with something like this within the file

                        $AdminPlainPass = "Whos-Your-Daddy1"
                        $AdminSecurePass = $AdminPlainPass | ConvertTo-SecureString -AsPlainText -Force
                        
                        Set-LocalUser -Name 'adminuser' -Password $AdminSecurePass
                        

                        Create your adminuserpass.sls file in /srv/salt/ with something like this within the file

                        adminuserpass:
                          cmd.script:
                            - source: salt://adminuserpass.ps1
                            - shell: powershell
                            - env:
                              - ExecutionPolicy: "bypass"
                        

                        Run the salt command with something like this.

                        salt 'saltminion-host' state.apply adminuserpass
                        siringoS 1 Reply Last reply Reply Quote 2
                        • siringoS
                          siringo @black3dynamite
                          last edited by

                          Hey thanks for all the help everyone, it is greatly appreciated.

                          I've decided to go with LAPS as this is part of an overall 'let's tighten up security' project I've got going and my thoughts were, you can't go wrong if you go with the Vendor's recommendation.

                          I'm distributing the LAPS client software via Startup GPO which is working well ATM. Half way through the setup, but have stopped coz the weekend started.

                          I'll take a look at Salt as I need to broaden my horizons.

                          Thanks again folks.

                          F 1 Reply Last reply Reply Quote 2
                          • F
                            flaxking @siringo
                            last edited by flaxking

                            @siringo said in Change Local Admin Pwd?:

                            Hey thanks for all the help everyone, it is greatly appreciated.

                            I've decided to go with LAPS as this is part of an overall 'let's tighten up security' project I've got going and my thoughts were, you can't go wrong if you go with the Vendor's recommendation.

                            I'm distributing the LAPS client software via Startup GPO which is working well ATM. Half way through the setup, but have stopped coz the weekend started.

                            I'll take a look at Salt as I need to broaden my horizons.

                            Thanks again folks.

                            Fyi, to deploy to clients you just need to copy the dll and register it with regsvr32. But good thing you're not trying to deploy it with GP's software installation features.

                            M siringoS 2 Replies Last reply Reply Quote 1
                            • M
                              manxam @flaxking
                              last edited by

                              @flaxking said in Change Local Admin Pwd?:

                              Fyi, to deploy to clients you just need to copy the dll and register it with regsvr32. But good thing you're not trying to deploy it with GP's software installation features.

                              What's wrong with using GP software deployment for LAPS? This has always been my method using their msi and I've never experienced an issue.

                              F 1 Reply Last reply Reply Quote 0
                              • F
                                flaxking @manxam
                                last edited by

                                @manxam said in Change Local Admin Pwd?:

                                @flaxking said in Change Local Admin Pwd?:

                                Fyi, to deploy to clients you just need to copy the dll and register it with regsvr32. But good thing you're not trying to deploy it with GP's software installation features.

                                What's wrong with using GP software deployment for LAPS? This has always been my method using their msi and I've never experienced an issue.

                                I've just had a lot of issues with the GP's built in Software Installation feature, and I've heard the same from other techs. What I've seen is installations getting stuck and thus locking people out of their computer, and also it installing again even when the software was successfully installed.

                                I would imagine the LAPS msi should be so small it wouldn't give much issues, but IMO GP's software installation feature should be left untouched.

                                1 Reply Last reply Reply Quote 0
                                • siringoS
                                  siringo @flaxking
                                  last edited by

                                  @flaxking said in Change Local Admin Pwd?:

                                  @siringo said in Change Local Admin Pwd?:

                                  Hey thanks for all the help everyone, it is greatly appreciated.

                                  I've decided to go with LAPS as this is part of an overall 'let's tighten up security' project I've got going and my thoughts were, you can't go wrong if you go with the Vendor's recommendation.

                                  I'm distributing the LAPS client software via Startup GPO which is working well ATM. Half way through the setup, but have stopped coz the weekend started.

                                  I'll take a look at Salt as I need to broaden my horizons.

                                  Thanks again folks.

                                  Fyi, to deploy to clients you just need to copy the dll and register it with regsvr32. But good thing you're not trying to deploy it with GP's software installation features.

                                  I get around these problems by using Startup & Shutdown scripts. I create a simple bat file that copies the required files to the local %systemroot%, then I install whatever it is that needs installing. This seems to work well for me.

                                  1 Reply Last reply Reply Quote 0
                                  • 1
                                  • 2
                                  • 2 / 2
                                  • First post
                                    Last post