Windows 10: Unable to change password on Local Admin account, password not complex enough?

I am trying to change the password on a local administrator account Admin on a Windows 11 Pro box that is domain joined. When initially installing the OS, I used a common password since I knew I would have to reboot multiple times, and didn't want to have to type a 32 character randomly generated password every time.Now that the machine is AD joined, I logged in with the AD administrator account to cache it's credentials. I am now trying to change the password of the local "Admin" account to something more secure in case it is ever needed in the future.I log in with the local Admin account,

:)

 

admin password?

You can reset the Admin Password using Windows XP repair; See Here for step by step.

*Toast :toast:

 

admin password?

ok changed added admin password for d in safe mode!
Ok, now this is weird: XP repair will not accept my new password! WTF?

 

Managing password resets for local admin

Need more clarification on the matter, from what I'm seeing you're asking if you can somewhat automate managing passwords on hundreds of printers, scanners, mfp's. Without more details such as what brand(s) and model(s) you're using, confirming the capabilities of account management for those, we can speculate and make suggestions but they might not be as helpful as you'd like.

With some of those devices, finding out if they're tied to RADIUS or LDAP and if you're also taking advantage of security group assignments, that would be vastly more helpful. Then at that point if you're utilizing access privileges and restrictions based on security groups for devices to manage who even has authorized access. I would assume a company that size is likely running with all of those in-place, but you know what they say about ASSumptions. *Wink

Beyond that setting an extremely complex password for the default admin or disabling that account and creating a uniquely named account that only you and your security team know would be the way to go as well. Would still be a lot of manual work, and not sure what you can truly do to avoid that, so make the manual changes really count for something where you can. Security management in IT isn't easy, and access control is one of those things that takes a lot more involvement at various stages to do and execute correctly.

I'd say make the account name changes, make the password 64+ chars long, and perform annual or bi-annual changes as needed. Again, hopefully as-far-as user access-control, you're able to take advantage of a directory sync service and manage access from a print server with security groups.