Re: Root Password Change Script

Hello Lucd,

I find below script on community but having problem that I am not able to identify how I can change the password for one vm so I am stuck and I dont want to take risk of changing the password of all the host. So please suggest me th e changes in below script.

#Read in old passwords, masked

$oldpw = read-host -prompt "Enter the current root password" -AsSecureString

$newpw = read-host -prompt "Enter the desired new root password" -AsSecureString

#Decrypting for actual use

$oldpw = [System.Runtime.InteropServices.marshal]::PtrToStringAuto([System.Runtime.InteropServices.marshal]::SecureStringToBSTR($oldpw))

$newpw = [System.Runtime.InteropServices.marshal]::PtrToStringAuto([System.Runtime.InteropServices.marshal]::SecureStringToBSTR($newpw))

#Get list of ESXi hosts

$vCenter = Read-host -prompt "Enter the vCenter hostname:"

write-host "Prompting for credentials and connecting to vCenter..."

connect-viserver -server $vCenter -Credential (Get-Credential)

$hosts = @()

write-host "Querying for ESXi hosts..."

#!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

# Host selection section

# Uncomment only one Get-VMHost line

#!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

#Only ESXi hosts

Get-VMHost | sort | Where {$_.State -eq "Connected" -or $_.State -eq "Maintenance"} | Get-View | Where {$_.Summary.Config.Product.Name -match "i"} | % { $hosts+= $_.Name }

#All hosts

#Get-VMHost | sort | Where {$_.State -eq "Connected" -or $_.State -eq "Maintenance"} | % { $hosts+= $_.Name }

#All vSphere hosts (>= version 4.0.0)

#Get-VMHost | sort | Where {($_.State -eq "Connected" -or $_.State -eq "Maintenance") -and $_.version -ge '4.0.0'} | % { $hosts+= $_.Name }

Disconnect-VIServer -confirm:$false

#Connect to each ESXi host and change pw

foreach ($vmhost in $hosts) {

    write-host "Connecting to $vmhost..."

    connect-viserver -server $vmhost -user root -password "$oldpw"

    write-host "Changing root password on $vmhost..."

    Set-VMHostAccount -UserAccount root -password "$newpw"

    Disconnect-VIServer -confirm:$false

}