This companion tool allows you to generate encrypted passwords in bulk, to be used in conjunction with the /pe command line switch.
Its usage is pretty straightforward:
Encrypted password: zUAp8pQzKsvnxD4jYxNUKcR1J0H/KTO92ch1x8M8MaNwkAr5ya7PxA==
The output can be piped or redirected to whatever you want. Please note that it has a builtin delay of 2 seconds after each password, to prevent it from being used for a brute force ‘reverse engineering’ of passwords. This shouldn’t be a problem for normal scripted use however.
Starting with version 1.4, you can now also generate the password in the .rdp file hash format instead of the default encrypted format by using the option /hash. You could use this option to generate your own .rdp file for example. Please keep in mind however that – unlike with the encrypted password – the generated hash password only works for the user which ran the command and only on the computer it was generated on.
C:>gencrypt /p:P@sswordExample! /hash