none
How to change local administrator password via GPO?

    Question

  • Hi,

    I use Domain policy to create a local administrator user on workstations. At some point it looks like the password for that user was compromised.

    I tried to change the password in GPO, but cannot as some of the MS updates has disabled this functionality.

    Please advise, what could be done to keep local admin user on workstation, but change the password? As it may happen that a notebook may require the password for a printer driver installation...

    Thanks in advance.

    Regards,

    Igor. 

    Thursday, July 21, 2016 2:14 PM

Answers

  • Seems to be a powershell issue,check these articles

    http://support.royalapplications.com/knowledgebase/articles/626589-error-when-attempting-to-import-the-powershell-mo

    http://social.technet.microsoft.com/wiki/contents/articles/21016.how-to-install-windows-powershell-4-0.aspx


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Friday, July 22, 2016 4:47 PM

All replies

  • Hi,
     
    Am 21.07.2016 um 16:14 schrieb iaFreeman:
    > I tried to change the password in GPO,[...]
     
    You can not change it nativly by GPO. This option was deprecated
    with MS14-025. You need to script it
     
    I would recommend to use LAPS instead.
     
    Mark
    --
    Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management
     
    Homepage:  http://www.gruppenrichtlinien.de - deutsch
     
    • Proposed as answer by d4rkcell Thursday, July 21, 2016 2:44 PM
    Thursday, July 21, 2016 2:24 PM
  • Hi

     You can use "Local Administrator Password Solution (LAPS)" for this (to change local administrator password)

    https://www.microsoft.com/en-us/download/details.aspx?id=46899

    Also check these;

    https://technet.microsoft.com/en-us/mt227395.aspx?f=255&MSPPError=-2147217396

    https://flamingkeys.com/2015/05/deploying-the-local-administrator-password-solution-part-1/


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Thursday, July 21, 2016 2:25 PM
  • What Mark and Burak said
    Thursday, July 21, 2016 2:44 PM
  • Hi Burak,

    thank you and other guys for the replies!

    As long as you provided a link to flamingkeys.com article, which is very helpful, I am posting my reply to your message)

    Working with the part 2 of recommendations I have run into a problem running 

    the instruction In part 1, you would’ve installed the LAPS management tools onto a computer. Connect to this computer as a member of the Schema Admins Active Directory group. Open an elevated Windows PowerShell prompt and import the AdmPwd.PS module:

    I receive an error message below and actually do not know what to do with it...

    Could you please advise?

    Thanks in advance!

    Windows PowerShell
    Copyright (C) 2009 Microsoft Corporation. All rights reserved.

    PS C:\Users\Administrator> import-module admpwd.ps
    Import-Module : Could not load file or assembly 'file:///C:\Windows\system32\WindowsPowerShell\v1.0\Modules\admpwd.ps\A
    dmPwd.PS.dll' or one of its dependencies. This assembly is built by a runtime newer than the currently loaded runtime and cannot be loaded.
    At line:1 char:14
    + import-module <<<<  admpwd.ps
        + CategoryInfo          : NotSpecified: (:) [Import-Module], BadImageFormatException
        + FullyQualifiedErrorId : System.BadImageFormatException,Microsoft.PowerShell.Commands.ImportModuleCommand

    PS C:\Users\Administrator>

    Friday, July 22, 2016 2:35 PM
  • Seems to be a powershell issue,check these articles

    http://support.royalapplications.com/knowledgebase/articles/626589-error-when-attempting-to-import-the-powershell-mo

    http://social.technet.microsoft.com/wiki/contents/articles/21016.how-to-install-windows-powershell-4-0.aspx


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Friday, July 22, 2016 4:47 PM