Trying to automate updating a local account's password on a windows 2008R2 host. On my RH boxes, I can generate password as an encrypted MD5 string and just shove it into the
/etc/shadow file. I can generate that string on any Unix box and pass it securely to the target host.
This allows me to store rotating known passwords in a plain text file that I can then push to the host and update as needed.
perl -pi -e "s/$USER:$OLDPW:$LASTPWCHANGE/$USER:$NEWPW:$EPOCH_TODAY/" $SHADOW_FILE
The password cannot be stored unencrypted anywhere in the process and this should scale from 2+ hosts.
How might this be tackled in Windows 2008 and higher?