|
Posted by Steven L Umbach on July 7, 2005, 11:58 am
Please log in for more thread options To add to Rogers fine advice you can use the Resource Kit tool cusrmgr to
reset passwords via a batch file as per the link below if that, for some
reason, is still your only option to change all the passwords each time. I
am assuming that the servers all have different passwords. If not there are
easier ways to change the passwords but I recommend that they do not have
the same password. --- Steve
http://support.microsoft.com/default.aspx?scid=kb;en-us;272530 -- using
cusrmgr
http://www.sysinternals.com/Utilities/PsPasswd.html --- another password
tool from SysInternals.
>
> Would it not be more simple to go to the one machine and
> log in for them rather than visiting all later? Then you only
> need to visit, log in and inspect, and alter passwords on the
> one after they have finished (recognizing that they are not
> trusted one really should not stop at just changing the one
> password).
>
> Anyway, while there are ways to automate the password
> change, it would seem you have a bigger issue, namely
> untrusted people. You simply should never let an untrusted
> person access a machine as an admin.
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
>
>> A copy of all our server passwords & keys are always kept in a locked
> safe,
>> the problem is whenever somebody need access to the safe to retrieve a
>> particular password or key, I have to go round and change the passwords
>> again on all servers. I am tired of having to do this often, can
>> somebody
>> suggest ways or strategy of keeping multiple passwords safe.
>> Regards
>> JB
>>
>
>
| 
XML Sitemap