OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Erik Birkholz (erik_at_foundstone.com)
Date: Mon Aug 26 2002 - 18:09:02 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    The password can be changed with NET USER and the unlock can be done
    from CUSRMGR.

    Enjoy,

            Erik

    (Details below)
    *****************

    NET USER
    [username [password | *] [options]] [/DOMAIN]
             username {password | *} /ADD [options] [/DOMAIN]
             username [/DELETE] [/DOMAIN]

    NET USER creates and modifies user accounts on computers. When used
    without switches, it lists the user accounts for the computer. The
    user account information is stored in the user accounts database.

    This command works only on servers.

    username Is the name of the user account to add, delete, modify, or
                 view. The name of the user account can have as many as
                 20 characters.
    password Assigns or changes a password for the user's account.
                 A password must satisfy the minimum length set with the
                 /MINPWLEN option of the NET ACCOUNTS command. It can have
    as
                 many as 14 characters.
    * Produces a prompt for the password. The password is not
                 displayed when you type it at a password prompt.
    /DOMAIN Performs the operation on a domain controller of
                 the current domain.
    /ADD Adds a user account to the user accounts database.
    /DELETE Removes a user account from the user accounts database.

    *********CUSRMGR************
    From Windows 2000 Resource Kit
     
    C:\>cusrmgr
     
    CUsrMgr Ver 1.0 Jan98 by G.Zanzen (c) MCS Central Europe
    Sets a random password to a user
    usage: -u UserName [-m \\MachineName] \\ default LocalMachine
      Resetting Password Function
           -p Set to a random password
           -P xxx Sets password to xxx
      User Functions
           -r xxx Renames user to xxx
           -d xxx deletes user xxx
      Group Functions
           -rlg xxx yyy Renames local group xxx to yyy
           -rgg xxx yyy Renames global group xxx to yyy
           -alg xxx Add user (-u UserName) to local group xxx
           -agg xxx Add user (-u UserName) to global group xxx
           -dlg xxx deletes user (-u UserName) from local group xxx
           -dgg xxx deletes user (-u UserName) from global group xxx
      SetProperties Functions
           -c xxx sets Comment to xxx
           -f xxx sets Full Name to xxx
           -U xxx sets UserProfile to xxx
           -n xxx sets LogonScript to xxx
           -h xxx sets HomeDir to xxx
     
           -H x sets HomeDirDrive to x
     
           +s xxxx sets property xxxx
           -s xxxx resets property xxxx
           where xxxx can be any of the following properties:
                  MustChangePassword
                  CanNotChangePassword
                  PasswordNeverExpires
                  AccountDisabled
                  AccountLockout
                  RASUser
    returns 0 on success
     

    -----Original Message-----
    From: Hillensbeck, Preston [mailto:PHillensbecksfbcic.com]
    Sent: Friday, August 23, 2002 12:32 PM
    To: 'focus-mssecurityfocus.com'
    Subject: Password Change Utility

    Anyone know of a password changing utility I might find for changing
    passwords and unlocking accounts for helpdesk personnel that use Windows
    NT 4.0 Workstation? I researched it and Active Directory Users &
    Computers can be used for Windows 2000 users, but the other set of users
    that need to change passwords cannot go to Windows 2000 just yet, so I
    am looking for a small utility for them, if one exists. Please let me
    know if you know of any solutions, shareware or not. Thanks.

    Preston