Hate the task of changing your local admin password across your domain of computers? If your like me, you do! A large group of people only change this when they deploy a new image, a very valid time to do this! If you really are like me your also some what of a Nazi when it comes to changing passwords! I don’t like only doing it upon a new image deployment. What if I want to change it quarterly? What if I want to do it mid day? What if I’m just feeling like clicking a bunch of buttons for no reason?
Well, if any of those reasons sound good to you, then I submit to you, the following! This is all in VBS. It’s written for Active Directory with a Windows XP/Server 2003 R2 environment. It’s very straight forward, no frills. I don’t even password mask the password input fields. Why? Frankly, I just did not see the need take that much extra time just for a password mask. It prompts for a user name and password that has Domain Admin level access, and then it asks you for a Organizational Unit in your AD structure, followed by a local account and new password.
What’s the practical use? Say you have a user call the help desk from a remote location with a company machine (tablet, laptop, etc…). They’re two minutes out from the biggest presentation they’ve ever made that will land your company over a million in revenue if the presenter succeeds. EVERYTHING about making this presentation work hinges on the presenter using their personal micro-portable-ergonomic-deluxe-with-lasers-that-kill-kittens-Microsoft-sponsored-blue-bedazzled mouse. Obviously, the only option we have is to give said user the local admin account to install. And now you have to change that account across your domain machines. Yay for you! You get to click buttons.
Without further adieu, just copy and paste the following into a text file and save it as “blah blah blah.vbs” Do not forget to change the following line (line 86):
[code]Set objOU = GetObject("LDAP://OU=" & strOU & ",DC=Gachis,DC=Net")[/code]
To something that matches your domain (E.g. change DC=Gachis,DC=Net to DC=YOURDOMAIN,DC=YOURDOMAIN etc…)
Disclaimer: I am not responsible if you bork your domain/computers/local squirrels by using this script. I am providing it free and open to anyone and everyone who wishes to give it a try for their own needs.
[code]
'=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
' This is a VBS to change a local account's password across an OU of Computers in AD.
' This is a collection of snippits of code from all over the place as well as a bit of my own.
' Enjoy! -Alexander Lawrence
'=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
On Error Resume Next
'constants
Const WbemAuthenticationLevelPktPrivacy = 6
Const ForAppending = 8
' Create the File System Object
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objFSOTwo = CreateObject("Scripting.FileSystemObject")
Set objFSOThree = CreateObject("Scripting.FileSystemObject")
'directory and file paths
strDirectory = "c:\output"
strFilePW = "\PWChanged.txt"
strFileNR = "\NotReached.txt"
' If..Exists. Then, Else ... End If construction for directory/files for log output.
If objFSOThree.FolderExists(strDirectory) Then
Set objFolder = objFSO.GetFolder(strDirectory)
Else
Set objFolder = objFSO.CreateFolder(strDirectory)
End If
If objFSO.FileExists(strDirectory & strFilePW) Then
Set objFolder = objFSO.GetFolder(strDirectory)
Else
Set objFile = objFSO.CreateTextFile(strDirectory & strFilePW)
End If
If objFSOTwo.FileExists(strDirectory & strFileNR) Then
Set objFolder = objFSOTwo.GetFolder(strDirectory)
Else
Set objFile = objFSOTwo.CreateTextFile(strDirectory & strFileNR)
End If
'User input on Domain Admin Account/Password, OU, Local Account/Password.
strUser = InputBox _
("Please enter a User Name with sufficient Domain Level Access (E.g. Domain Admin):", _
"User Name","User Name")
If strUser = "" Then
Wscript.Quit
End If
strPassword = InputBox _
("Please enter Password:", _
"Password")
If strPassword = "" Then
Wscript.Quit
End If
strOU = InputBox _
("Please enter the organizational unit of the computers you wish to modify:", _
"Enter OU Name","Organizational Unit")
If strOU = "" Then
Wscript.Quit
End If
strLclUsr = InputBox _
("Please enter the Local User account you wish to modify:", _
"Local User","Local User")
If strPassword = "" Then
Wscript.Quit
End If
strLclPass = InputBox _
("Please enter the new Local User account password:", _
"Local User Password")
If strPassword = "" Then
Wscript.Quit
End If
'Get Computer information out of AD and Ping active computers. If no return on ping, write "Time - Computer Name: Could not be reached" to C:\output\NotReached.txt
'If able to change account password, write "Time - Computer Name: Password Changed!" to C:\output\PWChanged.txt
strNamespace = "root\cimv2"
Set objOU = GetObject("LDAP://OU=" & strOU & ",DC=Gachis,DC=Net")
objOU.Filter = Array("Computer")
For Each objComputer in objOU
strComputer = objComputer.CN
Set objShell = CreateObject("WScript.Shell")
strCommand = "%comspec% /c ping -n 3 -w 1000 " & strComputer & ""
Set objExecObject = objShell.Exec(strCommand)
Do While Not objExecObject.StdOut.AtEndOfStream
strText = objExecObject.StdOut.ReadAll()
If Instr(strText, "Reply") > 0 Then
Set objWbemLocator = CreateObject("WbemScripting.SWbemLocator")
Set objWMIService = objwbemLocator.ConnectServer _
(strComputer, strNamespace, strUser, strPassword)
objWMIService.Security_.authenticationLevel = WbemAuthenticationLevelPktPrivacy
Set objUser = GetObject("WinNT://" & strComputer & "/" & strLclUsr)
objUser.SetPassword strLclPass
Set colItems = objWMIService.ExecQuery _
("Select * From Win32_OperatingSystem")
For Each objItem in ColItems
Set objFile = objFSO.OpenTextFile("C:\output\PWChanged.txt", ForAppending, True)
objFile.WriteLine Now & " - " & strComputer & ": Password Changed!"
objFile.Close
Next
' ==========
' End
' ==========
Else
Set objFileTwo = objFSOTwo.OpenTextFile("C:\output\NotReached.txt", ForAppending, True)
objFileTwo.WriteLine Now & " - " & strComputer & ": could not be reached."
objFileTwo.Close
End If
Loop
Next
'Announce to User that script is done.
Wscript.Echo "Script is Finished. See C:\Output for Logs."[/code]
Share on Facebook
