Re: Local Administrator password change for many computers

[H Morrow Long <morrow.long () YALE EDU>]

There are a number of commercial vendor solutions of SAPM (Gartner term ­
Secure Administrator Password Management) packages to track, set, reset and
invalidate local administrator and 'service' accounts across servers :

Cyber-Ark
Lieberman
Symark (PowerKeeper)
CA
EtcŠ

From:  Jason Gates <jasongates () SOUTHERN EDU>
Reply-To:  EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Date:  Friday, October 5, 2012 12:20 PM
To:  EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Subject:  [SECURITY] Local Administrator password change for many computers

Has anyone come across a good method for changing local administrator
passwords on many computers?
I've looked into:
pspasswd from sysinternals
group policy preferences
SCCM scripts

I'm not impressed with how GPP obfuscates the password, scripts are
insecure(?) and pspasswd is not very ellegant since it requires the computer
to be alive at the time its run.
Any other ideas?
--
Jason Gates
IT Security Consultant
Southern Adventist University