On my previous post, I had a chance to take on Group Policy Preferences with a very quick very humble description of it. On our part 2 we will demo on "How to manage local administrator accounts on machines" which has been a one of the favorite topics on the web before, even at the Microsoft Philippines Community Forum way back 2007. Before what we do is create a script to do this and run thru GPO, now with Windows Server 2008 Group Policy Preferences, we can do it in just a few clicks.
To start open your Group Policy Management Console and Create or Edit the GPO you want to use.
On the Computer Configuration, Go to the Preferences, and Expand Control Panel Settings:
Right Click Local users and Groups and Select New Local User.
Chose the action to UPDATE the Built-in Administrator Account.
I also chose that the local built-in administrator cannot change its password and it never expires. You can also chose to disable it if you want to. In order to assign a new password to it, fill up the Password and the Confirm password. Apply or click Okay and there, you have successfully deployed a GPO that updates Built-in Local Administrator and its passwords for all of the machines that this GPO applies to.
If you have not visited my first post, here is a link for more info on Group Policy Preferences.