none
Local Administrator Password on all workstations across domain

    Question

  • Hi all,

    I have 500 workstations in my domain. I want to apply a Group Policy to achieve the following  only for Workstations (Servers Excluded)

    1. No one from the domain can change the local administrator account password except Domain Administrators, Desktop Support Technicians.

    -tfernandes


    tfernandes

    Saturday, April 25, 2015 7:12 PM

Answers

All replies

  • Hi;

    The following link may be useful for you:

    http://www.grouppolicy.biz/2014/05/set-local-administrator-account-random-password/


    Please VOTE as HELPFUL if the post helps you and remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    Monday, April 27, 2015 6:32 AM
  • Have a look on below give references might be it helps you:

    Controlling Privileges of the Administrator Accounts: http://www.windowsecurity.com/articles-tutorials/authentication_and_encryption/Controlling-Privileges-Administrator-Accounts.html

    How to Change the Local Administrator Password on Domain Member Computers: http://social.technet.microsoft.com/wiki/contents/articles/1827.active-directory-how-to-change-the-local-administrator-password-on-domain-member-computers-dsforum2wiki.aspx

    Resetting the Local Administrator Password on Computers: http://windowsitpro.com/powershell/resetting-local-administrator-password-computers
    Monday, April 27, 2015 6:39 AM
  • Using of Group Policy Preferences to change password is not secure.
    Monday, April 27, 2015 7:31 AM
  • Hi,

    If you apply the patch http://support.microsoft.com/kb/2962486 , that you could not change the local administrator Password using GPP.

    http://blogs.technet.com/b/askpfeplat/archive/2014/05/19/how-to-automate-changing-the-local-administrator-password.aspx

    Regards.


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Tuesday, April 28, 2015 3:11 AM
    Moderator