Managed clients

MSI Installer

MSI installer installs client side GPO extension that maintains password of local admin account. CSE is installed to %ProgramFiles%\AdmPwd\CSE folder.

In addition, during CSE installation, the following actions can be performed:

  • Creation of custom local admin account
    • Account receives cryptographically random, complex password 16 characters long, and is made member of local Administrators group
    • Installer performs this action when value of property CUSTOMADMINNAME is set to value other than “__null__”
    • Value can be passed from command line, or via MST file created by tool of choice (such as Orca )
    • Example of command line that installs CSE and creates custom local admin account named CustomAdmin: msiexec /i /q AdmPwd.E.CSE.Setup.x64.msi CUSTOMADMINNAME=CustomAdmin
  • Reset password of built-in local admin account
    • Account receives cryptographically random, 16 characters long, complex password
    • Installer performs this action when value of property PROTECTBUILTINADMIN is set to “true”
      Note: This action is performed only on domain joined machines by default - this is to prevent unwanted locking of access to standalone machine. To perform it on standalone machine as well, you must also add parameter FORCE=true

AppX installer for Nano

AppX installer installs management service, plus event manifest for registration of event publisher for logging to Application Event log. Additional features like creation of custom admin account and protection of built-in admin account are not available for installer on Windows Nano Server platform. Sample configuration is delivered in AdmPwd.E.Config.ps1 file that is part of download with Nano server install package.