For SEP 14.3 and newer (especially RU2+), Broadcom has resetpass.bat in favor of a more secure architecture. If the script fails or gives an "Access Denied" error:
Not through this batch file. The default behavior resets to null/blank. You can later set a new password via the SEPM policy or the smc -p set <newpassword> command. resetpass.bat for symantec 14 download
Using the utility requires local access to the server hosting the SEPM. It cannot be executed remotely without prior remote access to the OS. For SEP 14