Set administrator password via batch file

Question

Hello everyone,

I want to change administrator password via batch file or via ps1 file. But I want 2 important things:

1. not show new password via message box;
2. nobody read this batch file.

Please help me. Thanks.

Answer 1

Where the password will come from ?
Someone will type it manually ?

If so,

$Password = Read-Host -AsSecureString
$UserAccount = Get-LocalUser -Name "User02"
$UserAccount | Set-LocalUser -Password $Password

For the file, if you want to restrict people from reading it, juste remove Users group from the NTFS permissions and only keep the user that will run the batch to be able to read the file.

Answer 2

Hi,

I recommend you to avoid using script to change the local administrator account. Using the script you cannot ensure that the password is different on each server.

I recommend you to deploy LAPS Local Administrator Password Solution. This solution is free and let you save the password in secure location : a protected attribute in active directory. To have more details about this solution , you can read the following articles:
Microsoft LAPS usage

Local Administrator Password Solution

Please don't forget to mark helpful reply as answer