asked on

Local admin account

Hi I have a windows 7 machine that lost connection to the domain and we can therefor not logon to it. I need to enable the (Hidden) local administrator account remotely via command line.

Please help with the command line script to enable the account reometly from a different machine

X Layer

Try to run this command with psexec:

psexec \\machine net user administrator /active:yes

Open in new window

h3nnys

ASKER

got the error saying:

couldn't access \\zolekace
the trust relationship between this workstation and the primary DC failed

Any suggestions ?

X Layer

I hope that you've set administrator password. Then you can start computer in safe mode and login with administrator account. Then activate admin account with this command or trough MMC.

John

Can you temporarily add the computer back to its domain for the sole purpose of making a new local account that is a member of the adminstrators group? .... Thinkpads_User

h3nnys

ASKER

I can not logon to the Workstation at all I have NO access to that pc and the only way to add it to the domain is through the local admin account so your question does not make much sense to me

X Layer

Did you set password for admin account? Did you tried boot into safe mode and logon?

John

Your first post says the computer lost its connection to the domain. So I worded my post badly. What I was hoping was that you could reconnect it and it would connect itself to the domain. ... Thinkpads_User

John

If you have no access and safe mode does not work, boot with a bootable CD, recover what information you need on a USB key, and then re-install Windows 7 from the media that came with the PC or from its recovery partition.

... Thinkpads_User

ASKER CERTIFIED SOLUTION

yo_bee

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

yo_bee

Note:
If you are running Win7 you can take advantage of GPP's and set the Local Administrators password from Group Policys. This will help you standardize the network clients.

http://www.windowsecurity.com/articles/Top5-Security-Settings-Group-Policy-Windows-Server-2008.html (Focus on the user not the group)

This is the link that also has a script that can me used at logon.
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/b1e94909-bb0b-4e10-83a0-cd7812dfe073/