When I wanted to change the local administrator password on all servers in the AD domain, I just used the remote PS move, which allows me to push even very simple commands from CMD to the remote server.
I wrote a short script where I use powershell to get information from a domain controller and, based on certain conditions, press the command on the servers.
I find this a very simple and quick way to change the local administrator password. The only requirement is to enable WinRM on all servers.
Below is the script:
Invoke-Command -ScriptBlock {net user administrator "Password01"} -ComputerName (Get-ADComputer -SearchBase "OU=test,OU=servers,DC=lab,DC=com" -Filter * | Select-Object -Expand Name)
source share