Change Local Administrator Password with Group Policy

hey what's up everybody this is Chris D from PC addicts the scenario on this one is we are at a school district here which what I want to do since I've been working at this school district I have noticed that a lot of the client computers are not standardized with their administrator password their local administrator password okay so like let's say it's not connected to domain or you're having a problem trying to log into the domain you want to log in locally as an administrator some of the computers don't have a password on the on the administrator account some of them the administrator account has a password of who knows what and whatnot so what I want to do is centrally via a group policy preference GPO I want to set the local admin password amongst the hundreds of computers that are in this School District all at once or at least the next time the group policy preferences or group policy refreshes so what we have here is I'm on the server and I am currently remoted in doing some work on a teacher computer alright set so now on this computer here what I want to do is let's test out the local administrator password first because I want you to see that this is actually going to work so if we got to start and we do run we do CMD and let's go ahead what I want to do is run a command prompt as the local administrator and the way I'll do this let's bring up the on-screen keyboard let's see where is it here it is alright know the on-screen keyboard what I want to do let's let me show you this is working here I'm going to do a run as are you in a s space for it slash user let's see : crap how do we do : there we go and then I'm just gonna do it without the domain account and sorry for the slowness administrator there we go and space CMD so basically we're just I just want to launch a command prompt as the local administrator so we hit enter it's gonna prompt us for a password there it is and now it's not gonna show the password obviously but you'll see me here typing it now I know the password for the locally I said it here for the local administrator account and it is Beavis so I'm gonna type B e a V s and hit enter boom we have command prompt running as administrator okay so now let's get off this end user computer let's bring up server manager and let's create a new group policy I'm gonna create it under domain computers I'm going to call this low low oh man I can't delete and I can't backspace so I better type right local ah C under pressure administrator password reset I know what that means anybody else that comes into the environment if I no longer work here should know what that means local administrator password reset so let's configure this thing right click it go to edit we are going to go it's a computer configuration and it's under the new group policy preferences section so if we're going to preferences expand control panel under local users we're gonna right click and go to new local user now the action is update so the all the computers do have an administrator account and so I just type an administrator and I'm gonna put in a new password let's call it I know what it is I'm going to go ahead and just create it whatever and then I'll change it because for security purposes and confidentiality I don't want to put the actual password and you're right so I'm just going to put the password as pass one two three pass one two three I don't want the user to force them to change it the account never expires and for now eventually I will put user cannot change password just in case so I'll hit apply ok so now we got the new policy in place under the domain computer so all the computers underneath that I'm gonna go ahead and minimize that let's go back to that computer let's do a gpupdate let me exit that and we'll just start fresh so go ahead and bring up command prompt let's do a GP update real quick refresh these policies all right it's now done so now let's just go ahead and try it let's do a run as user administrator MD let's hit enter let's put in our new password P a s s 1 2 3 hit enter there it is policy took place now I'm gonna go ahead and remove that real quick because I don't want the other computers to get that at the moment I was I will be changing it though but for now let's go ahead and just delete it off of this oh you and I will just reconfigure that when I'm done with this video but anyways so to summarize real quick we just create a group policy and we dumped it in the domain computers because all my computers on this domain are under this oh you somewhere right we basically just said hey update the local administrator password to be the new password easy as that

Channel: PC-Addicts

Views: 90,057

Keywords: support, tips, pc-addicts, live, tech, computer tips, chat, hacks, tricks, computer tips & tricks

Id: MfKpSEIaDr8

Length: 5min 35sec (335 seconds)

Published: Wed Sep 26 2012