SOLVED Changing localadmin password in TaskSequence

[Aprillia]

I am looking for the steps to change the localadmin password in task sequence in SCCM.

I am going to Software library, task sequences, right click on the task sequence and click edit , go to Windows Setup> Apply Windows settings and change the password there but not clear on how to deploy and distribute content. Could you advise on the next steps.

Thanks in advance

 

[Garth]

I take it this is for existing computers? Have you looked at LAPS? You could use a command line to change it. Lot of examples on the web.

 

[Aprillia]

Hi Garth,

Thanks for this info. My understanding was with LAPS, passwords are randomized but we are trying to use one localadmin password for all machines when imaging the computers.

 

[Prajwal Desai]

LAPS is more secure method and recommended. But since you want to set a fixed password for administrator account, you must use the Group Policy to do that.

 

[Aprillia]

Hi Pajwal,

Thanks for you response. We are going to deploy localadmin password through Group policy. Our Group policies are applied twice a day and sometimes when the machines are imaged they don't get updated right away because they may reamain shut down for some time.

Because of that, we are also changing localadmin password through task sequence to make sure the password is already changed even before the Group policy is applied.

If we were to change the local admin password through task sequence, do we need to edit it under Apply Windows settings in SCCM, deploy it then distribute it?

What would be the best practice of deploying the changes? Should it be applied to all unknown computers?

Thanks again

 

[Prajwal Desai]

If we were to change the local admin password through task sequence, do we need to edit it under Apply Windows settings in SCCM, deploy it then distribute it?

You can do this so that you set the administrator account password when you image them. If the GPO's are getting applied after imaging, you can run the gpupdate /force command at the end of task sequence to ensure the newly imaged machine gets the policies.

 

[Aprillia]

Thanks Pajwal

 

[Garth]

Hi Pajwal,

Thanks for you response. We are going to deploy localadmin password through Group policy. Our Group policies are applied twice a day and sometimes when the machines are imaged they don't get updated right away because they may reamain shut down for some time.

That is NOT right, GPO are applied when the computer boot or every 60 minutes. Therefore the PW would apply the first time the computer joins the the domain and then check ever 60 minutes after that. so...