Remotely change local admin passwords.

Systems administrators that manage local administrative accounts on multiple computers regularly need to change the account password as part of standard security practices. PsPasswd is a tool that lets you change an account password on the local or remote systems, enabling administrators to create batch files that run PsPasswd against the computers they manage in order to perform a mass change of the administrator password.

Step #1

Download the pspasswd tool from Microsoft.

Go to http://technet.microsoft.com/en-us/sysinternals

Step #2

Copy the pspasswd.exe to the:

c:\windows\system32\

directory on your PC or server.

Step #3

Create a file called “Machinelist.txt” with PC names you wish to change the local admin passwords on; one PC per line.

Step #4

Create a batch file with code similar to this:  pspasswd.exe @machinelist.txt -u domain\administrator -p domainpassword administrator newpassword
echo “Complete”
pause

Step #5

Edit the batch file with the correct credentials and the new password information.

Step #6

Make sure the machines are online and then run the script. You need to use an account with domain administrator rights for the –u and –p parameters in order for this to run correctly.

Conclusion:

This is a very Quick, Simple, Effective method to manage local administrator passwords remotely.  PsPasswd uses the Windows password reset APIs, so it does not send passwords over the network in the clear.