总结和测试了以下几种方法,都是利用微软自己的东西,第一种方法比较适合小环境下使用,第二和第三个方法比较适合有域的环境下使用
一,How to Use the Cusrmgr.exe Tool to Change Administrator Account PassWord on Multiple Computers
The following .bat file will change the local administrator password to newpass on the \\pc1, \\pc2, and \\pc3 computers:
cusrmgr.exe -u Administrator -m \\pc1 -P newpass
cusrmgr.exe -u Administrator -m \\pc2 -P newpass
cusrmgr.exe -u Administrator -m \\pc3 -P newpass
To run this .bat file sUCcessfully, the user must have administrative privileges on \\pc1, \\pc2, and \\pc3. Also, note that you must use a capital P for the -P switch, because a lowercase p sets the account password to a random string.
How to Rename the Local Administrator Account and Change the Password
NOTE: In the following example, the .bat file is named Example2.bat.
The following .bat file will rename the local administrator account on \\pc1 to pc1admin and change the password to a random string.
cusrmgr.exe -u Administrator -m \\pc1 -r pc1admin -p
To run this .bat file successfully, the user must have administrative privileges on \\pc1. The .bat file will rename the user account, and then change its password.
这个命令不太适合域环境下大批量用户使用,使用这个命令的时候,一定要注意P这个参数大小写的区别
二,组策略中启动脚本
在启动脚本里面可以调用一个BAT文件,BAT文件内容可以如下:net user administrator test
这个script脚本默认是隐藏起来的,存放在C:\windows\system32\GroupPolicy\Machine\Scripts\Startup下(由于条件受限,我都是在自己的机器上测试,同样适用于域环境)
缺点就是用户可以看到这个隐藏的文件,在高安全的环境下可能有点欠缺
三,组策略-管理模板-系统-登陆-“在用户登陆时运行这些程序”
显示-添加命令即可
(出处:http://www.sheup.com)