Local admin password changes en masse

Another handy project.


First and foremost, follow this process when changing the passwords:

  1. Create Excel file with servers/passwords
  2. Import into your password manager
  3. Use that Excel file as the basis for the 'serverpasslist.txt' file

How to use
# Open a command prompt with appropriate DA credentials.
# Browse to the directory containing the batch file, list file, and Sysinternals tool files.
# Run the batch file.

If there are issues, like the computer name does not exist, you'll see this:
---------------
 E:\scripts\sysinternals>serverpasschange.bat

 PsPasswd v1.22 - Local and remote password changer
 Copyright (C) 2003-2004 Mark Russinovich
 Sysinternals - www.sysinternals.com

 Error changing password:
 '''The RPC server is unavailable.'''
---------------
Script
See below for sources.  Removed the echoing to help with visual security.  Removed extra parameters as they are not necessary.
---------------
 @echo off
 set FILE=serverpasslist.txt

 for /F "skip=2 tokens=1,2*" %%i in (%FILE%) do (
  echo %%i
  pspasswd.exe \\%%i.domain.local administrator %%j
 )
---------------
As a note on this script, I left the 'echo %%i' line in because if a change fails, the pspasswd.exe command doesn't print out the name, so viewing the failed cmds at the end now has the name above the fail message.

File structure
Spacing is tab-delimited - handy for copying out of Excel.

 Target NewPassword
 -------------------------------------------------------
 SERVER01 Password1!
 SERVER02 Password2@
 SERVER03 Password3#

Sources
* http://forum.sysinternals.com/remote-password-change_topic9469.html
* http://technet.microsoft.com/en-us/sysinternals/bb897543.aspx
* http://social.technet.microsoft.com/wiki/contents/articles/390.how-to-reset-the-local-administrator-password-on-multiple-computers-remotely.aspx

Comments

Popular posts from this blog

DFSR - eventid 4312 - replication just won't work

Fixing duplicate SPNs (service principal name)

Logstash to Nagios - alerting based on Windows Event ID