[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 189
  • Last Modified:

Local Admin login - Access Denied

We recently had junior IT software tech { if i should call him that } run maintenance on various machines on one of our client networks.
One specific machine as outlined below is experiencing local admin right issues.
Even though we know the local admin password, we cannot login as the local admin { machine_name\adminusername }, machine responds with access denied.

Details are:

Dell XPS 13 running Windows 8.1 Pro that is attached to a domain. Works perfectly on the domain however it looks like the Local admin profile has been tampered with (Local admin “user” folder deleted under “C:\Users\”)
I cannot log onto the Local admin profile but I can however log onto domain all profiles.
Logged on as Domain Administrator { Super users } I cannot edit anything under “Computer management”, Local users and groups show that the Local admin user is there but the PW cannot be reset, no new user can be added as it keeps saying “access denied”.
In Computer management I cannot access “Disk management” it says “You do not have access rights to logical Disk Manager on (Pc name)”
 
Cannot reset, refresh, repair or even reinstall windows. Keeps saying certain windows file missing.
Cannot Copy specific file over to the C:, just says “you need administrator permissions to copy to this folder”
Cannot install or update programs even after Admin credentials are prompted and filled in, popup says “elevated rights required”
 
Seems as if the C: drive is restricted.
Cannot edit C: drive permissions either.

Please can someone provide a solution?

Thanks
0
aNaLyz3R
Asked:
aNaLyz3R
  • 5
  • 5
  • 2
  • +1
1 Solution
 
William FulksSystems Analyst & WebmasterCommented:
Sounds like he may have disabled the local admin account and it screwed up your permissions.

Open up a command prompt and type "net user administrator /active:yes" and hit enter. This should turn the account back on.
0
 
John HurstBusiness Consultant (Owner)Commented:
it looks like the Local admin profile has been tampered with (Local admin “user” folder deleted under “C:\Users\”)

That will certainly cause the issues you have.

Can you log into this machine as Domain Admin (you not the tech) and make a new local admin user and profile?
0
 
akosinoahCommented:
Just use wondershare Live Boot create a bootable USB and reset the password for any account. As long as there is no encryption running on the hard disk.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
John HurstBusiness Consultant (Owner)Commented:
It the admin profile has been deleted as said above, then I do not think you can just reset the password,  The profile needs to be re-created.
0
 
aNaLyz3RAuthor Commented:
@ William Fulks - We have tried the command, still doesnt work.
Please note, under computer management, it shows that the administrator account is disabled.
We do however have a secondary full admin account and definitely know what the password is. But we cannot login with that password.
It seems as though the idiot { to put it bluntly }  disabled the local admin account.

@ John Hurst - We can login as domain admin but cannot make local admin changes via computer management
0
 
John HurstBusiness Consultant (Owner)Commented:
You should be able create a new profile, make that an administrator account and then login locally and make the changes you need - possibly delete the existing admin account.
0
 
aNaLyz3RAuthor Commented:
@ John Hurst - When logged in as domain admin - Access Denied when trying to create local admin user under computer management.
0
 
John HurstBusiness Consultant (Owner)Commented:
I would then suggest at this point you back up the data on the computer and reinstall Windows 8.1 fresh (or better, install Windows 10 Pro).
0
 
aNaLyz3RAuthor Commented:
@ John - Thanks, i was hoping this would'nt be the solution but everything is pointing in that direction. Problem is we sitting with about 15 machines that have the same problem....
0
 
John HurstBusiness Consultant (Owner)Commented:
How would you have 15 machines with screwed up local admin profiles?  Somebody has screwed something up or you have a virus outbreak.
0
 
William FulksSystems Analyst & WebmasterCommented:
When you login as domain admin, will it let you create a regular user account without any kind of admin privileges? If it does, then you could try leaving and then rejoining the domain via that account.

Also, in my suggestion above about using the command, did you restart after entering the command?
0
 
aNaLyz3RAuthor Commented:
@ John - Network is definitely not infected with a virus, definitely permission changes on the machines.
0
 
aNaLyz3RAuthor Commented:
Just use wondershare Live Boot create a bootable USB and reset the password for any account. As long as there is no encryption running on the hard disk.

This solution worked 100% in resolving the issue in question.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 5
  • 5
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now