Issue: Let’s suppose there has been some security concerns in your company and you are asked to re-name local administrator account and change its password on all your workstation. We will get the work done VIA GPO.
Solution : Create GPO and apply to all workstation in your forest /Domain.
On the domain controller , click on start type gpmc.msc
Expand Group policy objects , new GPO and give it a name in this example we will use “Rename_Local_Admin_reset Password”
Click edit
- User Configuration
- Preferences
- Control Panel
new local user and modify the options the way you want it. We are updating existing local administrator account with our selection
Now apply the GPO to all computers
here is the result from local PC
Before GPO
After GPO
from workstation if you like to see the results right away
| gpupdate /force |
Respectfully,
Oz Casey, Dedeal
MVP Exchange Server
MCITP (EMA), MCITP (SA)
MCSE 2003, M+, S+, MCDST
Security+, Project +, Server +
http://smtp25.blogspot.com/ (Blog)
http://telnet25.wordpress.com/ (Blog)
2 comments:
Shouldn't this be performed on the 'Computer Configuration' tree and not the 'User Configuration'? We're modifying the computer, not the user?
Especially if it's a local directory that we're talking about.
Post a Comment