Account Management

Remove Members from Local Admin Group (w/ custom skipname)

Script downloads an runs a VBS that will grab a list of all members of the Administrators group. Then it will remove all but the default admin account and domain admin. Can whitelist any user with admin in the name and/or choose a custom name to skip when running/scheduling. Writes results to the procedure log.…

Remove Members from Local Admin Group

Script downloads and runs a VBS that will grab a list of all members of the Administrators group. Then it will remove all but the default admin account and domain admin. Can whitelist any user with admin in the name at the prompt when running/scheduling. Writes results to the procedure log. Can report using $adminremove$.

Password – Clear Complexity

Script will disable Minimum Password Length, Maximum PW Age, and how many unique passwords (re-usablitiy). It will also set the Password complexity off, which forces letters, numbers, symbols per Microsoft’s standards.

Password – Restore security policy from backup

The “Password – Set Complexity” script saves a backup of the security profile. If you want to restore this policy for whatever reason, use this script. If the backup is not present, the script will report to the procedure log.

Password – Set Complexity

Script makes a backup of security policy, which can be restored with a different script. Script will set Minimum Password Length, Maximum PW Age, and how many unique passwords (re-usablitiy). It will also set the Password complexity on, which will force letters, numbers, symbols per Microsoft’s requirements. Can restore security policy using the saved backup…

Password Generator to change Admin PW

Rotate the admin password for your MSP admin account Running an MSP or IT department demands some kind of administrator access to the endpoints under your control. While it is often a good idea to limit end-user access to limited user accounts in Windows, it is a good idea to create a secondary account on…

SetPasswordExpiration for non-admins

Sets global password expiration policy. Then sets exceptions for each user in the administrators group. Saves a log file under ‘Get File’ called SetPasswordExpirationLog.txt. Not tested for use on servers using Active Directory. Requires Windows 7 or newer.

Account Management

Remove Members from Local Admin Group (w/ custom skipname)

Remove Members from Local Admin Group

Password – Clear Complexity

Password – Restore security policy from backup

Password – Set Complexity

Password Generator to change Admin PW

SetPasswordExpiration for non-admins

Audit Local Admin Accounts

Create Domain Account

Create Local Admin Account

Search

Get In Touch!

Additional Resources

About Us