Hi all,

I have a domain with more than 1000 accounts and  need to reset the password of local admins in these machines to same.I know we can set the same using GPO but it is not a recommended way from MS.ANyone please help me with best solution.

regards,

Asif Sharafudeen

• Edited by Asif.Sharafudeen 55 minutes ago

Hi Asif,

If you don't want to use GPO, then you can explore LAPS from Microsoft. Check the below link for more info.

https://technet.microsoft.com/en-us/library/security/3062591.aspx

You can also use third party tool like "Bulk Password Reset".

http://www.netwrix.com/local_admin_bulk_password_reset_freeware.html

-Umesh.S.K

Hi

 The easit way via gpo,

Check the article how to,

http://blogs.technet.com/b/askpfeplat/archive/2014/05/19/how-to-automate-changing-the-local-administrator-password.aspx

Umesh, Thank You for your update.Do you have real experience in working on this tool.

Hi Asif,

I have used LAPS and it works fine. You need to test it in lab before implementing in production. You can get documents related to LAPS from below.

https://www.microsoft.com/en-us/download/details.aspx?id=46899

However, this tool changes password automatically when the password age expires. You can also reset password and retrieve it using LAPS tool. But when tool changes the password, it does not keep all the passwords to the same.So, if you really want to keep same password on all machines in domain, I would advice to go with GPO.

-Umesh.S.K

• Edited by Umesh S K 18 minutes ago

Umesh,

I will try and let you know if I have any further doubts.