kartnico / winadminpassword Goto Github PK

This is the same as having the same password on all machines. The weak spot of this design is that you're going to broadly distribute the central secret on which everything depends on, plaintext. Thus the final passwords are all related to each other, and trivial to compute. You either have to chat with a server or seed all system images and build scripts individually. Otherwise it is pure obfuscation, not security.

A well protected central database with independent passwords is way more secure. This is what Kerberos is about, and it comes in every mayor Domain Controller product like Samba 4, Active Directory, FreeIPA etc.