Les, I am actually using your local admin password changing script. The script works great. I am tyring to run this script from a server with domain admin rights to change local admin passwords for workstations and exclude servers. Aside from using the exclude list (which I would primarily use to exclude specific workstations), is there an easy way to do this? There may be some servers that I forget to include in the list. I've tried using @PRODUCTTYPE, but it only reads the registry from the server I am running the script from.