Hi, I was wondering if anyone out there could help, we currently run a LAN with around 350 workstations. A mix of platforms. All log on with a KiXtart script. The problem we have is that as Windows 2000 has slowly rolled out we have many different Local Administrator Passwords. Is there line(s)or registry key to reset the password to something we agree on. Dont worry too much about the Kix part of things. Any help (even the smallest) would be greatly appreciated :-) Cheers Justin

You can use the Dos command "net user" to change the password on the local machine. here is an example of the command: net user username password

Justin, I too would love a tool to change local admin passwords across a domain as we often change our domain passwords and then have to walk around all 200 machines and change the local ones too. Pain in the £$%# The ctrl-alt-del prompt stops any automated login and change of password so as you say it would have to be done at the registry level. The only problem is that passwords are encrypted so you would have to input the new password in incrypted format (its getting more complecated). also to change the registry you would have to be logged in as administrator so you still would have to go to each machine to log in. Basically I don't think it is possible, but if anyone knows anyother way then please help us. (note i dont think net user command won't work as you would still have to login with administrative permissions to execute it.)

There is a way, but with a caveat. The "net user" command is what is needed. 1) write a batch file and include the following line: net user administrator password01 Replace password01 with the desired password. Place this batch file into the netlgon or sysvol/domain/policies/... folder. Open AD users and computers, right click on domain and choose group policy. Make a new policy (local_adm_pword). Expand "Computer Configuration" -> "Windows Settings" -> "Scripts" -> "Startup". Locate the batch file you just created. Close the group policy window and highlight the new policy on the domain properties window. Click properties and security. Add authenticated users and check "Apply Group Policy". The caveat is that this will only be effective if the machine is rebooted.

Surely you still have to log onto the machine as administrator or as someone that has administrative privillages?