• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Recovering Admin Accounts

C

Carlosinfl

Loves the juice
Joined
Sep 25, 2002
Messages
6,633
OK - We have a set of 100 Windows XP SP2 machines on the 3rd floor LAN. The problem is some of these users are electing to login to their boxes locally rather than the Domain/DC authentication. I have been tasked to go machine to machine and verify the machine has been added to LAN/Domain & lock the local admin account with a password only we (IT Dept.) knows.

The problem I can't even access some of the local admin accounts since their passwords have been changed or set by previous IT staff. We can't reinstall or impact any of their work so I decided to search online...I am a Linux guy so have never done this on a Windows machine and find many sites and utilities but don't know what is the best way.

Can you guys assist me or point me in the right direction?
 
The easiest solution is to use a VBScript from a domain workstation or server and simply use domain credentials to change the local admin password on each workstation.
 
Lots of local password resetting tools out there...(looks like you have one in your inbox)
As SJ noted...
Or another approach..just fire up MMC and reach out across the network..manage the local user accounts through MMC.
 
I developed a vbscript which reads a txt file of ip addresses and connects to each machine and sets the local admin pass to what you want it to be.
 
Sorry - I don't know anything about VBScripts and when I googled some info - they seem very detailed and complex.
 
I think u can do this with the net user command and a .bat file. set it as a startup script and that should take care of it. test it first to make sure it works tho.

net user administrator newPassword

just make sure you deny the domain controllers from the gpo, not sure if it'll change the domain admin pw too.
 
Kill the local accounts and change the admin password. You don't need local accounts for AD.
 
You must log in or register to reply here.
Back
Top