Change Administrator Password on XP machines

Is there a command line that will change the computers administrator password?
Or is there another way I can force a password change on the computers
connected to the 2003 server? I need to change this password on 140 machines
or prevent someone from logging as the administrator to local machine and I
do not want to go to all 140 computers and change it.

Please see my TechTips site at http://brad.dinerman.com/techtips.

In particular, please see tip #2 under the Windows category.

Yours,
Brad


______________________________________
Bradley J. Dinerman, MVP - Windows Server Systems
President, New England Information Security Group
http://www.neisg.org

Tom wrote:
> Is there a command line that will change the computers administrator password?
> Or is there another way I can force a password change on the computers
> connected to the 2003 server? I need to change this password on 140 machines
> or prevent someone from logging as the administrator to local machine and I
> do not want to go to all 140 computers and change it.
>

OK, it looks like I read the original request too fast. My techtip is
to change service credentials, not user credentials.

I'll repost with correct information.

-Brad


______________________________________
Bradley J. Dinerman, MVP - Windows Server Systems
President, New England Information Security Group
http://www.neisg.org

Brad Dinerman [MVP - Windows Server Networking] wrote:
> Please see my TechTips site at http://brad.dinerman.com/techtips.
>
> In particular, please see tip #2 under the Windows category.
>
> Yours,
> Brad
>
>
> ______________________________________
> Bradley J. Dinerman, MVP - Windows Server Systems
> President, New England Information Security Group
> http://www.neisg.org
>
> Tom wrote:
>> Is there a command line that will change the computers administrator
>> password? Or is there another way I can force a password change on the
>> computers connected to the 2003 server? I need to change this password
>> on 140 machines or prevent someone from logging as the administrator
>> to local machine and I do not want to go to all 140 computers and
>> change it.

you can use net user command line. this how to my help,

How to change user password using command line
In a case you want to a user password using command line, you can do net user user_name * /domain, for example net user blin * /chicagotech.net. .....
http://howtonetworking.com/Security/changepwcommand.htm

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Tom" <(E-Mail Removed)> wrote in message news:0CF4E71C-29A3-4DE9-86E0-(E-Mail Removed)...
Is there a command line that will change the computers administrator password?
Or is there another way I can force a password change on the computers
connected to the 2003 server? I need to change this password on 140 machines
or prevent someone from logging as the administrator to local machine and I
do not want to go to all 140 computers and change it.

You are referring to the Local Administrator password I assume.

There is a way, probably with GPO, of preventing local login.
I know it exists, because I inherited a W2k3 server from a closed branch
office which would not let me logon to the local machine account, even though
I had the local administrator password.

I just don't know how it was done - I had to re-install W2k3.
--
Newell White


"Robert L [MS-MVP]" wrote:

> you can use net user command line. this how to my help,
>
> How to change user password using command line
> In a case you want to a user password using command line, you can do net user user_name * /domain, for example net user blin * /chicagotech.net. .....
> http://howtonetworking.com/Security/changepwcommand.htm
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
> "Tom" <(E-Mail Removed)> wrote in message news:0CF4E71C-29A3-4DE9-86E0-(E-Mail Removed)...
> Is there a command line that will change the computers administrator password?
> Or is there another way I can force a password change on the computers
> connected to the 2003 server? I need to change this password on 140 machines
> or prevent someone from logging as the administrator to local machine and I
> do not want to go to all 140 computers and change it

A WMI script can be written to do this:

Set oWshNet = CreateObject("WScript.Network")

sUserName = "something"
' to get to the current username, use this instead
'sUserName = oWshNet.UserName


sComputerName = oWshNet.ComputerName
Set oUser = GetObject("WinNT://" & sComputerName & "/"& sUserName & ",user")


' to change password:
sOldPwd = "the oldpwd"
sNewPwd = "the newpwd"
oUser.ChangePassword(sOldPwd, sNewPwd)
oUser.Setinfo


' if you have admin rights and you want to set the password, do this instead:
sNewPwd = "the newpwd"
oUser.SetPassword(sNewPwd)
oUser.Setinfo



"Tom" <(E-Mail Removed)> wrote in message
news:0CF4E71C-29A3-4DE9-86E0-(E-Mail Removed)...
> Is there a command line that will change the computers administrator password?
> Or is there another way I can force a password change on the computers
> connected to the 2003 server? I need to change this password on 140 machines
> or prevent someone from logging as the administrator to local machine and I
> do not want to go to all 140 computers and change it.
>

"Tom" <(E-Mail Removed)> wrote in message
news:0CF4E71C-29A3-4DE9-86E0-(E-Mail Removed)...
> Is there a command line that will change the computers administrator
> password?
> Or is there another way I can force a password change on the computers
> connected to the 2003 server? I need to change this password on 140
> machines
> or prevent someone from logging as the administrator to local machine and
> I
> do not want to go to all 140 computers and change it.

Do a google search for cryptpwd - you should be able to put this in a
machine startup script and pass it a parameter:

-p for a random password
-P MyPass sets password to MyPass

steve