each server whenever Group Policy is refreshed. We need to register it with a PowerShell command.Register-AdmPwdWithGPO -GpoIdentity: "General Server GPO"The GPOIdentity can be either the displayName, GUID or distinguishedName. My example uses the displayName.If you are wondering what this command does, it adds its client side extension value to the gPCMachineExtensionNames attribute for the Group Policy you selected. I my policy it looked like this:Before:[{C6DC5466-785A-11D2-84D0-00C04FB169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]After:[{C6DC5466-785A-11D2-84D0-00C04FB169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}][{D76B9641-3288-4f75-942D-087DE603E3EA}{D76B9641-3288-4f75-942D-087DE603E3EA}]Run the client install on the local serversThe final step in the setup process is to run the client install on the local computers. These are the same install files, AdmPwd.Setup.x64.msi and AdmPwd.Setup.x86.msi, that we used earlier. I chose to do mine using the Software Installation feature of Group Policy but you can do this any way you like. If you just want to test this quickly a manual install like we did in the beginning works just fine. On the client you dont need to choose any additional options.Once this is installed you can see it in Programs and Features.If you want to script this you can use this command line to do a silent install:msiexec /i \AdmPwd.Setup.x64.msi /quiet or msiexec /i \AdmPwd.Setup.x86.msiJust change the to a local or network path. Example: msiexec /i \\dc3\share\AdmPwd.Setup.x64.msi /quietIm sure there are other ways but this should get you started.Changing the Basic ConfigurationBy default this solution uses a password with password complexity, 12 characters and changes the password every 30 days. If you decide you want to change that just modify the settings as seen below.Choose the settings that fits your needs.So what does this look like?Once everything is configured, and Group Policy has refreshed on the clients, you can look at the properties of the computer object and see the new settings.The password is stored in plain text. The Expiration date is a little more complex. Active Directory stores date/time values as the number of 100-nanosecond intervals that have elapsed since the 0 hour on January 1, 1601 till the date/time that is being stored. The time is always stored in Greenwich Mean Time (GMT) in the Active Directory. If you want to convert it yourself try this command:w32tm /ntte I know you dont want everybody poking around in Active Directory so wouldnt it be nice if there was a graphical interface available. Well there is. When you install the program on a computer where you want the ability to easily retrieve the password just select the Fat client UI option.The program you want to run is C:\Program Files\AdmPwd\ AdmPwd.UI.exe. It will be in the menu and looks like this:When you launch the interface all you have to do is enter the client name and click Search.If you want to manually reset the password just click the Set button. When a Group Policy refresh runs it will be updated.If you dont want to deal with a GUI you can also get the password using PowerShell. All the same security you set still applies. You still need the rights to read this attribute!Get-AdmPwdPassword -ComputerName You can also reset the password using PowerShell.Reset-AdmPwdPassword -ComputerName -WhenEffective Just in case you are wondering,