Local admin account disabled?!

[Sir]

Please can someone help here? I am having issues with laptops of teachers that have been fine for ages now suddenly appearing with issues updating sims, fms etc. the issue is that the local admin account is disabled and i have access denied whenever i try to re enable it. The local admin account that I created on them have dissappeared!! All i need to do is get in as local admin but all ways (secpol, cmd :active GP on machine) gives me 'Access denied'. I am a domain admin and logging in as main admin of domain does not work either. Hiren boot offline password will not work as Bl****** truecrypt is stopping it and i cannot decrypt without admin privelidges!!!!! ARRRRGHHHH

 

Come on clever bods; you can do it!

[Griff]

I would re-image it :\

[sted]

log in as a domain admin and go to manage computer users and create a new admin user. iirc to enable the administrator account its a reg fix

[kaphc]

Can you boot into Safe Mode and log in as "Administrator" that way and then unlock the accounts?

[Sir]

Thanks all,

 

Griff: this is in my toolkit for sure but I do like to find reason/ fix to these...

Sted: Wouldn't let me- 'access denied'! grrrr what is iirc?

kaphc: tried that. Same. Access denied :-/

 

This, however has worked on one machine..... about to test the others..

 

How to Make a Domain User the Local Administrator for all PCs - TechNet Articles - United States (English) - TechNet Wiki

 

I wasn't holding out much hope for it and I'm really not sure how it also re-enabled the built in admin account....... but I'm very happy if this works on all! stand-by....

[kaphc]

Fingers crossed for you!

[themightymrp]

iirc = if I recall correctly

 

If its domain joined, can't you use a group policy to reset the administrator account or create a new one? Just a reboot should pick it up then

[themightymrp]

EDIT - really should have looked at that link first lol

[Sir]

AHA. Thanks themighty..... reminded me of some old internet relay chat stuff... showing my age!

 

Yes was just about to say that this is near what i did BUT.................

 

I logged into the machine after a gpforce and did not have to enable the l admin account myself; it was already enabled?! All i did was create a policy that added me to the local admin account. Does this mean that by adding a dom user as local admin in restricted groups via GP that this enables the admin account if it disabled? The reason i ask is that I disable built-in admin and create my own local admin account for the school pc's so would like to keep track of which pc's have this account enabled.....