Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Trying to automate updating a local account's password on a windows 2008R2 host. On my RH boxes, I can generate password as an encrypted MD5 string and just shove it into the /etc/shadow file. I can generate that string on any Unix box and pass it securely to the target host.

This allows me to store rotating known passwords in a plain text file that I can then push to the host and update as needed.

perl -pi -e "s/$USER:$OLDPW:$LASTPWCHANGE/$USER:$NEWPW:$EPOCH_TODAY/" $SHADOW_FILE

The password cannot be stored unencrypted anywhere in the process and this should scale from 2+ hosts.

How might this be tackled in Windows 2008 and higher?

share|improve this question
    
net user username password password ? Is there a reason you cannot do this with Group Policy? Using MD5 does not really count as encrypting anymore... –  TheFiddlerWins Sep 4 '13 at 15:52
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.