Change Local Administrator Password with Group Policy

How to reset the local Administrator password enterprise-wide all at once using Group Policy GPO.

As a Systems Administrator, you want to limit the amount of time you have to physically walk around to each computer so you can be more productive with other tasks. Resetting the local Administrator password can be reset by using Group Policy Preferences very quickly and easily. This article will walk you through step-by-step of the entire process.

Launch Group Policy Management (or access it via Server Manager).
Right-click the OU you want to apply this policy to and select Create a GPO in this domain, and link it here…


Give the new policy a name. I named it Local Administrator Password Reset.


Next we need to edit the policy.
Right-click the new policy and select Edit.


Expand: Computer Configuration | Preferences | Control Panel Settings
Right-click on Local Users and Groups. Select New then Local User.


Fill in the following:
User Name: Administrator
Password: (whatever you want your password to be)
Confirm Password: (same as above)
Select: User cannot change password
Select: Account never expires
Then select OK to accept the settings.


You are done configuring the policy.
To test it out, you can remote into a client computer and run gpupdpate.

In the article I show you a little trick on how to run the command prompt as a different user. In this case, I run the command prompt as the local administrator so I can test out the new password change.

Open a command prompt and type:

runas /user:administrator cmd

Type in the new password and press Enter.

If a new command window pops up and you see Administrator in the title bar of the command prompt, you verified the password has been changed.