Local admin account no longer part of the administrators group after removing from DC

[soveryapt]

Good afternoon all

 

I hope you're well and not too busy in the run up to the summer!

 

Strange one here, I have a Windows 10 laptop that was letting non administrators login, but as soon as it logged in, it logged them back out. Admin accounts logged in perfectly well. So, the first fix I thought I would try (as all the other laptops that were deployed at the same time work fine) was to remove it from the domain and then re-add it after a reboot. Simple you would think yes? No ... When I came to reboot and logged in with the local admin account I created when setting up the machines (username ICTAdmin instead of the built in administrator), it would seem that the local admin has been removed from all groups on the machine, therefore it is no longer part of the Administrators group so I can't do anything with it.

 

I've tried booting up from Hirens on my Zalman drive, but the laptop isn't playing ball, so I can bring a copy on CD with me next week (I might see if there is a blank CD in the school as well) but I thought, I know, I'll ask the hive..

 

So, anyone else had this or anyone got any brilliant ideas to get around this rather interesting issue?

 

Thanks

Andy

[vimagoes]

Are you sure that account wasn't a member of Domain Admin? Because it would make sense this account vanishes if the computer no longer belongs to the domain.

[soveryapt]

Yup, very sure. When I set up a computer for the first time I set the default user that windows makes you create as being ICTAdmin (for schools anyway) with a relevant password for that site. That then takes all the settings of that default one from which I then add it to the network.

 

The only time this is different is when I actually deploy using WDS, in which case the machines are still given a local admin account of ICTAdmin, but all done through WDS should I need to remove it etc, but obviously first login there is then from a domain admin account (which has a different name - either the built in or my own which I set as soveryapt)