Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Local Admin login - Access Denied

Posted on 2016-11-28
14
Medium Priority
?
152 Views
Last Modified: 2016-11-29
We recently had junior IT software tech { if i should call him that } run maintenance on various machines on one of our client networks.
One specific machine as outlined below is experiencing local admin right issues.
Even though we know the local admin password, we cannot login as the local admin { machine_name\adminusername }, machine responds with access denied.

Details are:

Dell XPS 13 running Windows 8.1 Pro that is attached to a domain. Works perfectly on the domain however it looks like the Local admin profile has been tampered with (Local admin “user” folder deleted under “C:\Users\”)
I cannot log onto the Local admin profile but I can however log onto domain all profiles.
Logged on as Domain Administrator { Super users } I cannot edit anything under “Computer management”, Local users and groups show that the Local admin user is there but the PW cannot be reset, no new user can be added as it keeps saying “access denied”.
In Computer management I cannot access “Disk management” it says “You do not have access rights to logical Disk Manager on (Pc name)”
 
Cannot reset, refresh, repair or even reinstall windows. Keeps saying certain windows file missing.
Cannot Copy specific file over to the C:, just says “you need administrator permissions to copy to this folder”
Cannot install or update programs even after Admin credentials are prompted and filled in, popup says “elevated rights required”
 
Seems as if the C: drive is restricted.
Cannot edit C: drive permissions either.

Please can someone provide a solution?

Thanks
0
Comment
Question by:aNaLyz3R
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 5
  • 2
  • +1
14 Comments
 
LVL 15

Expert Comment

by:William Fulks
ID: 41904206
Sounds like he may have disabled the local admin account and it screwed up your permissions.

Open up a command prompt and type "net user administrator /active:yes" and hit enter. This should turn the account back on.
0
 
LVL 98

Expert Comment

by:John Hurst
ID: 41904215
it looks like the Local admin profile has been tampered with (Local admin “user” folder deleted under “C:\Users\”)

That will certainly cause the issues you have.

Can you log into this machine as Domain Admin (you not the tech) and make a new local admin user and profile?
0
 
LVL 1

Accepted Solution

by:
akosinoah earned 2000 total points
ID: 41904242
Just use wondershare Live Boot create a bootable USB and reset the password for any account. As long as there is no encryption running on the hard disk.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 98

Expert Comment

by:John Hurst
ID: 41904255
It the admin profile has been deleted as said above, then I do not think you can just reset the password,  The profile needs to be re-created.
0
 

Author Comment

by:aNaLyz3R
ID: 41904313
@ William Fulks - We have tried the command, still doesnt work.
Please note, under computer management, it shows that the administrator account is disabled.
We do however have a secondary full admin account and definitely know what the password is. But we cannot login with that password.
It seems as though the idiot { to put it bluntly }  disabled the local admin account.

@ John Hurst - We can login as domain admin but cannot make local admin changes via computer management
0
 
LVL 98

Expert Comment

by:John Hurst
ID: 41904334
You should be able create a new profile, make that an administrator account and then login locally and make the changes you need - possibly delete the existing admin account.
0
 

Author Comment

by:aNaLyz3R
ID: 41904366
@ John Hurst - When logged in as domain admin - Access Denied when trying to create local admin user under computer management.
0
 
LVL 98

Expert Comment

by:John Hurst
ID: 41904367
I would then suggest at this point you back up the data on the computer and reinstall Windows 8.1 fresh (or better, install Windows 10 Pro).
0
 

Author Comment

by:aNaLyz3R
ID: 41904374
@ John - Thanks, i was hoping this would'nt be the solution but everything is pointing in that direction. Problem is we sitting with about 15 machines that have the same problem....
0
 
LVL 98

Expert Comment

by:John Hurst
ID: 41904383
How would you have 15 machines with screwed up local admin profiles?  Somebody has screwed something up or you have a virus outbreak.
0
 
LVL 15

Expert Comment

by:William Fulks
ID: 41904877
When you login as domain admin, will it let you create a regular user account without any kind of admin privileges? If it does, then you could try leaving and then rejoining the domain via that account.

Also, in my suggestion above about using the command, did you restart after entering the command?
0
 

Author Comment

by:aNaLyz3R
ID: 41905312
@ John - Network is definitely not infected with a virus, definitely permission changes on the machines.
0
 

Author Closing Comment

by:aNaLyz3R
ID: 41905317
Just use wondershare Live Boot create a bootable USB and reset the password for any account. As long as there is no encryption running on the hard disk.

This solution worked 100% in resolving the issue in question.
0

Featured Post

Tech or Treat!

Submit an article about your scariest tech experience—and the solution—and you’ll be automatically entered to win one of 4 fantastic tech gadgets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article helps those who get the 0xc004d307 error when trying to rearm (reset the license) Office 2013 in a Virtual Desktop Infrastructure (VDI) and/or those trying to prep the master image for Microsoft Key Management (KMS) activation. (i.e.- C…
Windows Server 2003 introduced persistent Volume Shadow Copies and made 2003 a must-do upgrade.  Since then, it's been a must-implement feature for all servers doing any kind of file sharing.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
How to fix incompatible JVM issue while installing Eclipse While installing Eclipse in windows, got one error like above and unable to proceed with the installation. This video describes how to successfully install Eclipse. How to solve incompa…

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question