Local admin account with "Password Required: No"

In all the PCs that I've checked, we have a local account which is a
member of Administrators.

Q1:
What does "Password required: No" mean: I tried to login interactively
to this PL account by entering a 'blank' or any arbitrary password but
cant login.  How do we check if it's interactive or non-interactive acct?

Q2:
Secondly by "Password changeable: Yes", does it mean
anyone can change its password?


C:\r>net user PL
User name                    PL
Full Name
Country/region code          000 (System Default)
Account active               Yes
Account expires              Never

Password last set            8/9/2017 9:48:28 AM
Password expires             Never
Password changeable          8/9/2017 9:48:28 AM
Password required            No   <== what does this mean
User may change password     Yes

Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   11/9/2017 12:41:00 PM

Logon hours allowed          All
Local Group Memberships      *Administrators
sunhuxAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

sunhuxAuthor Commented:
For Q2, I know the answer:
anyone who is using that account could change the password (if it's No, only admin can change it)
JohnBusiness Consultant (Owner)Commented:
In all the PCs that I've checked, we have a local account which is a member of Administrators.

If you are talking about the Administrator User, that is disabled by default and should stay that way.

If you are not talking about this, then someone set up the account. Maybe the person setting up the computer set up him or herself as the first user which is a local admin account. But it would have required a password.

You need this password to use the account.
David Johnson, CD, MVPOwnerCommented:
Password Required: no means that it can be set with a blank password
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

sunhuxAuthor Commented:
There's a separate local Administrator account present with "Password Required: Yes"

Without admin right, how can I check if it's a  non-Interactive account?
JohnBusiness Consultant (Owner)Commented:
Windows 10?  Start, Settings, User.   Look there for interactive (email) users.
Mal OsborneAlpha GeekCommented:
"Password required            No" means that a null password can be set. ie, the password is a 0 length string. Logging onto a machine just requires hitting enter.  Even if this is set, usually group policy will require a certain password length, which overrides this, so users can still not actually set a null password.

"Password changeable: Yes" means that the password can be changed, but not by "anyone", just the user themselves. For a shared admin account, that would mean anyone who can log in as that user.
sunhuxAuthor Commented:
> Windows 10?  Start, Settings, User.   Look there for interactive (email) users.
Yes, win 10.
Under Settings, I saw Account (but no 'User') but when I entered that "PL"
 account (under 'Email n app accts'), don't see it
sunhuxAuthor Commented:
>  Even if this is set, usually group policy will require a certain password length, which overrides this,
> so users can still not actually set a null password.

Might not be enforced for local accounts if the Wintel admins did not set it as such;  likely
enforced only for AD accounts
JohnBusiness Consultant (Owner)Commented:
No email account means no interactive account, just local.

So if you cannot log in you need the person who set it up to give you the password.
David Johnson, CD, MVPOwnerCommented:
one way since you have physical access you can use the utilman.exe trick
boot from some installation media
go to the windows\system32 folder
ren utilman.exe utilman.exe.old
copy cmd.exe utilman.exe
reboot the machine
at the login prompt hit the shift key 5 times
you will now be in a command prompt with system priviledges
net user newadmin password /add
net localgroup administrators newadmin /add
exit

Open in new window


you can now login as a local administrator using the newadmin account (use any name you want and any password you want.
if you want you can enable the local administrator account
net user administrator /active:yes

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
sunhuxAuthor Commented:
David's last solution was a good one but forgot to
say that the PC's HDD is encrypted & won't be able
to boot up from a CD/USB
JohnBusiness Consultant (Owner)Commented:
Thanks for the update. Were you otherwise able to deal with password problem?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.