Create a Search for Blank Passwords

New Contributor III

Is there a way with Casper Suite to create a search that will return Computers that have local accounts with a blank password?
Following that, are you able to create a policy that would force the account to create a password?
Thanks you for your time,


Contributor II

I don't think this can be done. Since the passwords even if blank are saved in hash, you can't tell how long they are.

Valued Contributor III

Just an idea...

Create a script that looks for local users.
Then try to run a simple task as each user using a blank password.
If that task completes you have found a user with a blank password.
Conversely if it errors they have a password set.
Either one should be easily detectable.