I wish to be able to automate some PCs I manage. Currently, I use Ansible, but I am not opposed to any other tool.
The goal is to be able to remotely change the password of an individual user account on a Windows 10 machine without the user losing access to their saved credentials in the Credential Manager.
I know that on Windows 10 by design it seems that unless a user themself triggers a command via the CTRL+ALT+DEL Password Change screen, then when the password is changed, the Credentials saved and associated secrets are wiped from existence.
However,I am certain I am not the first user to ever want to change a user's password remotely without wanting to scorched earth their Credential Manager and Secrets.
Googling for a few days every combination of the problem I can think of but can't seem to find a reasonable solution.
- Would a solution using the "RunAs" command work in an automated way on a headless machine?
- If not, is there any way to strip the credential wiping functionality from a user account on password change?