Admin Account Disabled

ML101 · 13 Sep 2017

Hi All, I have a issues in where I connected my laptop to my customers domain to assist with a few issues. Upon leaving the domain and going back to a workgroup I realised that their server had applied a group policy that disabled by local admin account. I am now left with my user account that is not elevated enough to re-join the domain or to add/remove apps etc. I am unable to enable the local admin or promote my user account to admin group. I have no restore points and struggling to boot from USB to run a WINPE etc.

Any useful advice would be gratefully accepted, thanks.

Samuria · 13 Sep 2017

Welcome to the forum. The only way really is to login as a domain admin unless they changed the password for local admin

Try3 · 13 Sep 2017

If your computer has therefore been left with no functioning Admin account then use the procedure in - If the Admin prompt has a greyed out or missing Yes button but no password entry box, use the Built-In Admin account in Safe mode to create two new Admin accounts - Forum article

Denis

ML101 · 13 Sep 2017

Try3, that worked perfectly, thank you. Many thanks for your help

Try3 · 13 Sep 2017

I am glad that the problem is fixed.

It occurs to me that [whilst I know nothing about domains] since you now have your working Admin account & a spare Admin account you might want to make a system image then connect to that domain again.

I suspect that the domain might only mess up Admin accounts that you are currently logged into at the time & leave your other Admin accounts alone.
If this is true then you could routinely make a temporary [sacrificial] Admin account to connect with so that your normal accounts were kept safe.

All the best,
Denis