Changing Administrator Account Credentials remotely

[BOB IROC]

Is there a way to remotely change the passwords on the administrator accounts on workstations in a network. I know I can do this one by one but I have over 1000 computers to do. It appears one of my schools techs did not follow instructions to rename the "Administrator" account to a different name and assign it a password. Instead he just created another User with Administrator priviledges and disabled the local Administrator account. Unfortunately even with the account disabled you can boot the computer up in safe mode and get in. At the very least I would like to add a password to all the local Administrator accounts until we can go around and re-image the computers properly. We had a student boot one of the computers in safe mode and get in with the administrator user and do some damage and now that the word is out that this can be done I am afraid more students will do the same.

I thought there may be some way to push settings out using a registry key or something.

[NooNoo]

Package your registry changes into an msi then use group policy to push it

Or create a login script...

[CeeBee]

Or run a script remotely with psexec:
1. create a list of machines (machines.txt) one per line
2. create a batch file changepass.bat:

for /f %%i in (machines.txt) do psexec -u domain\administrator -p domainpassword -accepteula \\%%i cmd /c net user administrator newpassword >>c:\logfile.txt

Of course you can refine this and log which machines were successful and which were not (ex powered off ) so you can target them later