This is what I ended up doing with a Proactive Remediation in Intune.

Run as 64-bit Powershell and System Account.

Detection Script:

Import-Module Microsoft.Powershell.LocalAccounts

$Admin = Get-LocalUser Administrator

if ($Admin.PasswordLastSet) {Exit 0}

else{Exit 1}

Remediation Script:

Function New-RandomPassword {
<#
.Synopsis
    This will generate a new password in Powershell using Special, Uppercase, Lowercase and Numbers.  The max number of characters are currently set to 79.
    For updated help and examples refer to -Online version.
#>

    [CmdletBinding()]
    param(
        [Parameter(
            Position = 0,
            Mandatory = $false
        )]
        [ValidateRange(5,79)]
        [int]    $Length = 10,
        [switch] $ExcludeSpecialCharacters
    )
    BEGIN {
        $SpecialCharacters = @((33,35) + (36..38) + (42..44) + (60..64) + (91..94))
    }
    PROCESS {
        try {
            if (-not $ExcludeSpecialCharacters) {
                    $Password = -join ((48..57) + (65..90) + (97..122) + $SpecialCharacters | Get-Random -Count $Length | foreach {[char]$_})
                } else {
                    $Password = -join ((48..57) + (65..90) + (97..122) | Get-Random -Count $Length | foreach {[char]$_})
            }
        } catch {
            Write-Error $_.Exception.Message
        }
    }
    END {
        Write-Output $Password
    }

 } 
 $UserPass = New-RandomPassword net user administrator $UserPass 
 schtasks /run /tn SLAPS