disable local account by setting a new random password