Creating an SCCM Package for Administrator Password Renewal

Overview

This post provides a PowerShell script that creates an SCCM package to reset the password for the administrator account. Regular password renewal is critical for maintaining security protocols and safeguarding against unauthorized access.

Instructions

Copy the provided PowerShell script to a location on your SCCM server.
Adjust the script variables such as $SCCMServer, $SiteCode, and $PackageSourcePath to fit your environment.
Run the script in PowerShell to create the SCCM package for the administrator password renewal.
Distribute the package to the appropriate distribution points within SCCM.
Monitor the deployment to ensure that the administrator password is renewed across all targeted systems.

What the Script Does

This PowerShell script automates the creation of an SCCM package that resets the password for the administrator account. The script checks for any existing packages with the same name and removes them to avoid conflicts. It then creates a new package that can be distributed to reset the administrator password across all targeted systems.

PowerShell Script

# Define Variables
$SCCMServer = "\\YourSCCMServer"
$SiteCode = "YourSiteCode"
$ScriptName = "Administrator-Password-Renewal"
$ScriptDescription = "Resets the password for the administrator account to maintain security."
$PackageSourcePath = "C:\Scripts\$ScriptName"

# Load SCCM PowerShell Module
Import-Module "$($Env:SMS_ADMIN_UI_PATH)\..\ConfigurationManager.psd1" -Force

# Connect to the SCCM Site
cd "$SiteCode`:"

# Check if a package with the same name exists and delete it
$ExistingPackages = Get-CMPackage -Name $ScriptName -ErrorAction SilentlyContinue

if ($ExistingPackages) {
    foreach ($Package in $ExistingPackages) {
        Remove-CMPackage -Id $Package.PackageID -Force
    }
}

# Create the Package Source Directory if it does not exist
if (!(Test-Path -Path $PackageSourcePath)) {
    New-Item -ItemType Directory -Path $PackageSourcePath -Force
}

# Create the PowerShell script
$ScriptContent = @'
# Resets the password for the administrator account
net user Administrator Curr3nt#2022
'@

$ScriptPath = "$PackageSourcePath\Administrator-Password-Renewal.ps1"
Set-Content -Path $ScriptPath -Value $ScriptContent

# Create the SCCM Package
$Package = New-CMPackage `
    -Name $ScriptName `
    -Description $ScriptDescription `
    -Path $PackageSourcePath

# Create a Program for the Package
$Program = New-CMProgram `
    -PackageName $ScriptName `
    -StandardProgramName $ScriptName `
    -CommandLine "powershell.exe -ExecutionPolicy Bypass -File Administrator-Password-Renewal.ps1" `
    -ProgramRunType "WhetherOrNotUserIsLoggedOn"

# Distribute the Package to the Distribution Point but do not deploy
Start-CMContentDistribution `
    -PackageName $ScriptName `
    -DistributionPointName "YourDistributionPointName"

Explanation

This script creates an SCCM package to renew the password for the administrator account, ensuring that security protocols are maintained. The script removes any existing package with the same name to prevent conflicts, and the new package is distributed to the specified distribution point for deployment.