脚本修改域内本地管理员密码

一台一台的修改域内计算机本地管理员密码不太现实，在没有Configuration manager这些工具的情况下，使用脚本来修改本地密码也颇为方便：

'Script for change the local administrator password

On Error Resume Next
Set objDictionary = CreateObject("Scripting.Dictionary")
i=0

passwd="password1"
call ChangePWD("OU=ou1,OU=ou2,DC=dc1,DC=cn",passwd)

Wscript.echo "Finished!"
If objDictionary.Count>0 Then call logError(objDictionary)

'-----------------End of main program--------------------

Sub LogError(objDictionary)
Const ForReading = 1, ForWriting = 2, ForAppending = 8
APP_ERROR_LOG = "chadminpwd.log"

Set fsoSysObj = CreateObject("Scripting.FileSystemObject")
Set oshell=createobject("wscript.shell")
On Error Resume Next
Set filFile = fsoSysObj.GetFile(APP_ERROR_LOG)
If Err <> 0 Then
Set filFile = fsoSysObj.CreateTextFile(APP_ERROR_LOG)
End If

On Error GoTo 0
' Open file as text stream for reading.
Set txsStream = filFile.OpenAsTextStream(ForAppending)
With txsStream
.WriteLine Now & " - Failed to change kbadmin on these computers:"
For Each strComputer in objDictionary.Items
.WriteLine strComputer
Next
.WriteBlankLines 1
.Close
End With
LogErrorEnd:
Exit Sub
End Sub

'The subroutine used for search the computers in the unit and
'change all the local administrator password
sub ChangePWD(ouname,passwd)
On Error Resume Next
set ObjOU = GetObject("LDAP://" & ouname)
ObjOU.Filter = Array("Computer")

For Each ObjComp in ObjOU
strComputer = Right(ObjComp.Name,Len(ObjComp.Name)-3)
'MsgBox strComputer & VbCrLf & ObjComp.OperatingSystem
Set objUser = GetObject("WinNT://" & strComputer & "/administrator, user")
If Err <> 0 Then
Wscript.Echo strComputer & " - Failed!!"  '& VbCrLf & Err.Number & " -- " &  Err.Description
i=i+1
objDictionary.Add i,strComputer
Err.Clear
Else
objUser.SetPassword passwd
objUser.SetInfo
'MsgBox strComputer & " has been successfully processed!"
WScript.Echo strComputer & " - OK!"
End If
Next

end sub

需要在远端计算机上关闭防火墙，至少是打开远程管理的端口135等，具体用TCPVIEW检测一下吧。