none
changing local admin password

    Question

  • seems there is a patch that disabled changing local admin passwords via GPO. what should admins do now without going to each computer to change local admin passwords?

    note: i heard there is a workaround in the form of a PowerShell script but really? GPO is an elegant solution why go back 10 steps??

    Thursday, August 13, 2015 6:16 AM

Answers

All replies

    • Edited by Slava Fedenko Thursday, August 13, 2015 9:59 AM
    • Proposed as answer by DonPick Friday, August 14, 2015 8:42 AM
    • Marked as answer by Reno Mardo Sunday, August 16, 2015 5:19 AM
    Thursday, August 13, 2015 9:59 AM
  • hi,

    thanks for the link. i will be deploying thru GPO using software installation feature but have a question on deployment method. if i use "Assign", will the MSI package be installed ONLY when the computer starts/restarts? what if the computer remains online and never restarts?

    Thursday, August 13, 2015 11:34 AM
  • Assigning Software
    You can assign a program distribution to users or computers. If you assign the program to a user, it is installed when the user logs on to the computer. When the user first runs the program, the installation is completed. If you assign the program to a computer, it is installed when the computer starts, and it is available to all users who log on to the computer. When a user first runs the program, the installation is completed.

    Publishing Software
    You can publish a program distribution to users. When the user logs on to the computer, the published program is displayed in the Add or Remove Programs dialog box, and it can be installed from there.


    Thursday, August 13, 2015 12:46 PM
  • seems there is a patch that disabled changing local admin passwords via GPO....

    ...... GPO is an elegant solution why go back 10 steps??

    This feature has been removed because of the security concerns with storing passwords in Group Policy Preferences.
     
    Microsoft has removed the ability to create or modify any Group Policy which contains a Group Policy Preference that specifies account credentials. For more details about this update, you can refer to this blog post (Note the blog post also includes a solution to this problem):
     
    http://blogs.technet.com/b/askpfeplat/archive/2014/05/19/how-to-automate-changing-the-local-administrator-password.aspx
     
    Hope this helps.
     

    Regards,

    Ethan Hua


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Friday, August 14, 2015 8:20 AM
    Moderator