Azure VM: reset local user account password

Question

folks, I have about 200 az vm, contains local user account. I need to reset password for all vms. Now I can do it through portal fine, but like to do scripting.

I tried with
$Computer = "TestVM"
$vmcomp = Get-AzVM -Name $Computer
$vmName = $vmcomp.Name
$resourceGroupName = $vmName.ResourceGroupName
$location = $vmName.Location
$Password = "*P@ssword2022!!"
$UserName = "AzureVM"

        Set-AzureRmVMAccessExtension -ResourceGroupName $resourceGroupName -VMName $vmName -Name $name -Location $location -typeHandlerVersion "2.0" -ForceRerun  

but didn't work, can someone give me examples or any ideas here

Thanks In Advance......

Answer 1

Hi @Arif Usman ,

The Az is the newer module and the replacement for the older AzureRM module.
I would recommend to use the Az only.
https://learn.microsoft.com/en-us/powershell/azure/new-azureps-module-az?view=azps-8.2.0

To uninstall the AzureRM module you could try the Uninstall-AzureRM cmdlet (which is in the Az.Account module): https://learn.microsoft.com/en-us/powershell/module/az.accounts/uninstall-azurerm?view=azps-8.2.0

Some more useful information you will find here:
https://basvo.github.io/azure/azurerm/powershell/2021/03/05/remove-azurerm-before-installing-az-module.html
https://stackoverflow.com/questions/34204373/how-to-clean-up-bad-azure-powershell-uninstall

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 2

Hi @Arif Usman ,

please try the Set-AzVMAccessExtension without the -TypeHandlerVersion parameter:

Set-AzVMAccessExtension -Credential $cred -Location "$location" -Name "PasswordReset" -ResourceGroupName "$resourceGroupName" -VMName "$vmName"  

Before running the script/command please verify if an extension from type Microsoft.Compute.VMAccessAgent is already installed on the VM. If so please delete the extension.
This can be done in the Azure Portal or via PowerShell:

$ext = Get-AzVMExtension -VMName $vmName -ResourceGroupName $resourceGroupName | Where-Object { $_.ExtensionType -eq "VMAccessAgent" }  
if ($ext) {  
    Remove-AzVMAccessExtension -VMName "$vmName" -ResourceGroupName "$resourceGroupName" -Name "$($ext.Name)" -Force  
}  

You can check the available versions of the extension by running the following command (just change the -Location parameter to the region your VM is running):

Get-AzVMExtensionImageType -PublisherName "Microsoft.Compute" -Location "northeurope" | Get-AzVMExtensionImage | Select Type, Version, PublisherName  

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 3

@Andreas Baumgarten : I really appreciate all help getting from you.

So I follow your direction and it did removed vmaccessgent (2nd script).
then i ran the last script to get-azvmextensionimage and found this.

but when i ran Set-AzVMAccessExtension i am getting following.