Changing the Local Administrator Password on Domain Workstations with Group Policy

by Chris Sanders [Published on 17 July 2008 / Last Updated on 3 July 2008]

Windows Server 2008 Group Policy introduces a lot of flexibility in performing security tasks that often involved a bit more headache. One of these is more control of the administrator account on domain workstations.

Previously, doing things such as changing the administrator account password for domain workstations involved bring things such as scripting into play. Windows Server 2008 group policy addresses some of these concerns and makes this type of activity a bit easier.

Making changes to the local administrator account is quite easy when working with Group Policy in Windows Server 2008. You can access these settings when configuring a new GPO by browsing to Computer Configuration\Preferences\Control Panel. From here, right click local users and groups, and click New – Local User. After doing this, select Update from the action drop down box and type Administrator as the user name. Once you have done this you can rename the account, change the password for it, or even disable it. This section of group policy can be used to add and configure any user account you like on your domain workstations. Simply apply the policy and you are good to go. This method is much easier than previous methods of performing the same task.

See Also

The Author — Chris Sanders

Chris Sanders is a network security analyst for EWA Government Systems Inc. Chris is the author of the book Practical Packet Analysis as well as several technical articles. His personal website at contains a great deal of information, articles, and guides related to network administration, network security, packet analysis, and general information technology.

Featured Links