Disabling local user accounts on remote servers

I have a local user account that is a member of the local admins group on
over 100 hundred servers. I would like to disable this local account from a
central location (my pc) instead of logging into each server and manually
disabling. I am a domain admin.

I would also prefer not to do this by using computer management and
connecting to the servers I want to disable the account on.

If I cannot do this i'd like to at least be able to change the password of
this local user account from my pc instead of logging into each server. Can
this be done with a script or batch file. If so can anyone provide some
sample code as I am not very familiar with writing scripts?

Steven
Thu Jun 29 18:16:33 CDT 2006

You could use a Group Policy startup script and then use the net user
command to disable the account but that would require that every server be
restarted. There is a fee utility from SysInternals called PsPasswd that
would allow you to write a batch file to change the password on each server
assuming the server is available to you via file and print sharing
connectivity. You can use the command with a text file containing the fully
qualified name of each server. You could also do something similar with
PsExec where you use the command net user username to disable the user
account as in net user steve /active:no. If the user account only exists on
the servers or you don't care about other computers you could even use the
wildcard option. I have not used either with a list myself so I don't know
offhand if you get a confirmation message or error message if a computer in
the list can not be contacted but you could test that out. You may also want
to post in a Windows scripting newsgroup. --- Steve

http://www.sysinternals.com/Utilities/PsPasswd.html -- PsPasswd
http://www.sysinternals.com/Utilities/PsExec.html --- PsExec

"James" <James@discussions.microsoft.com> wrote in message
news:556311F8-0A49-41C0-BA3C-54FF93932669@microsoft.com...
>I have a local user account that is a member of the local admins group on
> over 100 hundred servers. I would like to disable this local account from
> a
> central location (my pc) instead of logging into each server and manually
> disabling. I am a domain admin.
>
> I would also prefer not to do this by using computer management and
> connecting to the servers I want to disable the account on.
>
> If I cannot do this i'd like to at least be able to change the password of
> this local user account from my pc instead of logging into each server.
> Can
> this be done with a script or batch file. If so can anyone provide some
> sample code as I am not very familiar with writing scripts?

Roger
Thu Jun 29 20:30:31 CDT 2006

I would have to hack it out from other scripts, but this is certainly
something one could do. However, you also stated
"prefer not to do this by using computer management"
but technically speaking this would be using the same remote
management ports as the MS provided remote consoles.
So, if you stated that due to network ports availability then
script would likely not be your solution either.

"James" <James@discussions.microsoft.com> wrote in message
news:556311F8-0A49-41C0-BA3C-54FF93932669@microsoft.com...
>I have a local user account that is a member of the local admins group on
> over 100 hundred servers. I would like to disable this local account from
> a
> central location (my pc) instead of logging into each server and manually
> disabling. I am a domain admin.
>
> I would also prefer not to do this by using computer management and
> connecting to the servers I want to disable the account on.
>
> If I cannot do this i'd like to at least be able to change the password of
> this local user account from my pc instead of logging into each server.
> Can
> this be done with a script or batch file. If so can anyone provide some
> sample code as I am not very familiar with writing scripts?

James
Fri Jun 30 08:09:01 CDT 2006

Thanks for the reply. I understand its using the same ports but the manual
work is what I don't want to do. There will be instances where we'll have to
change the local admin passwords on these servers or workstations
periodically so a script would be ideal.

"Roger Abell [MVP]" wrote:

> I would have to hack it out from other scripts, but this is certainly
> something one could do. However, you also stated
> "prefer not to do this by using computer management"
> but technically speaking this would be using the same remote
> management ports as the MS provided remote consoles.
> So, if you stated that due to network ports availability then
> script would likely not be your solution either.
>
> "James" <James@discussions.microsoft.com> wrote in message
> news:556311F8-0A49-41C0-BA3C-54FF93932669@microsoft.com...
> >I have a local user account that is a member of the local admins group on
> > over 100 hundred servers. I would like to disable this local account from
> > a
> > central location (my pc) instead of logging into each server and manually
> > disabling. I am a domain admin.
> >
> > I would also prefer not to do this by using computer management and
> > connecting to the servers I want to disable the account on.
> >
> > If I cannot do this i'd like to at least be able to change the password of
> > this local user account from my pc instead of logging into each server.
> > Can
> > this be done with a script or batch file. If so can anyone provide some
> > sample code as I am not very familiar with writing scripts?
>
>
>