编辑文件 - change

✏️ 正在编辑: change_password.ps1

路径: /var/opt/nydus/ops/customer_local_ops/operating_system/powershell/change_password.ps1
提示: 您可以编辑任何文件（包括二进制文件），但请注意不当修改可能导致文件损坏。

param([Parameter(Mandatory)] [String] $userName)

$passwordBase64 = Read-Host
$password = [System.Text.Encoding]::UTF8.GetString(
    [System.Convert]::FromBase64String($passwordBase64))

if(Get-WmiObject -query "SELECT * FROM Win32_UserAccount where LocalAccount='True' and name = '$userName'"){
    $user = [ADSI]"WinNT://$($env:COMPUTERNAME)/$userName,user"
    try{
        $user.SetPassword($password)
        $user.SetInfo() 
    }catch{
        $errorMessage=$_.Exception.Message
        $errorMessage
        if($errorMessage -like "*Passwords may not contain the user's samAccountName *"){
            throw $_.Exception.Message 
        }elseif($errorMessage -like "*The password does not meet the password policy requirements.*"){
            $errorMessage
            secedit /export /cfg c:\secpol.cfg
            (gc C:\secpol.cfg).replace("PasswordComplexity = 1", "PasswordComplexity = 0") | Out-File C:\secpol.cfg
            secedit /configure /db c:\windows\security\local.sdb /cfg c:\secpol.cfg /areas SECURITYPOLICY
            rm -force c:\secpol.cfg -confirm:$false

$user.SetPassword($password)
            $user.SetInfo()

secedit /export /cfg c:\secpol.cfg
            (gc C:\secpol.cfg).replace("PasswordComplexity = 0", "PasswordComplexity = 1") | Out-File C:\secpol.cfg
            secedit /configure /db c:\windows\security\local.sdb /cfg c:\secpol.cfg /areas SECURITYPOLICY
            rm -force c:\secpol.cfg -confirm:$false
        }
    }   
}else{
    "User does not exist: $userName"
    exit 1
}

← 返回文件管理器