Administrator Account disabled
Recieve run.dll errors on my laptop. Attempted to remove error by resfreshing. I lost apps and program files. Attempted to refresh lap to factory conditions. Now my laptop shows "Administrator account has been disabled". Unable to gets to windows program. Attempted to update BIOS. Was not able to select file from USB.
Any ideals....
robcobb
Hi there @robcobb
Welcome to the HP Support Forums! It is a great place to find the help you need, both from other users, HP experts and other support personnel.
Since you already tried to do a factory restore, I assume that you had already tried to backup any data on that driver first. So I offer the following, on the recovery process. Check through both pages, to verify what you were doing and also to see if the troubleshooting portion is of use with what is happening on your machine.
Performing an HP System Recovery (Windows 8)
Troubleshooting HP System Recovery Problems (Windows 8)
From what you wrote, I gather that the BIOS did not even start to update. This may have been due to how the USB key was setup. Your system should be UEFI, and be bootable your usb key would have to be prepared as well as a UEFI bootable device.
Anyway if the recovery process still does not work for you, then please call our technical support at 800-474-6836. If you live outside the US/Canada Region, please click the link below to get the support number for your region.
http://www8.hp.com/us/en/contact-hp/ww-phone-assist.html
Malygris1
I work on behalf of HP
Please click Accept as Solution if you feel my post solved your issue, it will help others find the solution.
Click Kudos Thumbs Up on the right to say “Thanks” for helping!
Similar Messages
-
SCCM 2012 R2 CU3 - Drivers Not Installing, Local Administrator Account Disabled
After PXE OSD for a Thick Image of Win 7 x64 Ent completes, several Task Sequence steps are not complete. Namely, 3 device drivers are missing (NIC, SM Bus and some other chipset driver), the built-in Administrator Account is disabled and it's not Domain
joined.
I have already re-created the thick WIM twice. It was built in a VMware VM then captured with SCCM Capture Media. The NIC is a Realtek and I have downloaded the most recent version of the drivers from HP's site and added them to a driver package which is
deployed. I even added several older drivers to my Boot Image and created to 2 steps to add drivers in the Task Sequence - one automatically installs the best drivers, the other installs a package with 7 NIC drivers. When I get the error during PXE OSD, I
press F8 and the machine has an IP address and the driver for the NIC appears to be correct. Upon rebooting, Windows completes setup but the Administrator Account is not enabled and the NIC driver is missing, etc.
Here is the portion of the log where errors begin to show up (from D:\SMSTSLog). Any help is GREATLY appreciated!!
!--------------------------------------------------------------------------------------------! TSManager 11/18/2014 1:06:57 PM 872 (0x0368) Expand a string: WinPE TSManager
11/18/2014 1:06:58 PM 872 (0x0368) Executing command line: OSDApplyOS.exe /data:XXXXX0001A,%OSDDataImageIndex% TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Command line for extension
.exe is "%1" %* ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) Set command line: "OSDApplyOS.exe" /data:XXXXX0001A,1 ApplyOperatingSystem 11/18/2014
1:06:58 PM 1040 (0x0410) Searching for next available volume: ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) Volume C:\ has already used. ApplyOperatingSystem
11/18/2014 1:06:58 PM 1040 (0x0410) Volume D:\ has already used. ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) Volume E:\ is not a XXXXX hard drive.
ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) Volume X:\ is not a XXXXX hard drive. ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) it
!= volumes.end(), HRESULT=80004005 (e:\nts_sccm_release\sms\client\osdeployment\applyos\installcommon.cpp,519) ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) There are no more volumes available
for use. ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) GetNextAvailableVolume(allowFAT, volume), HRESULT=80004005 (e:\nts_sccm_release\sms\client\osdeployment\applyos\installcommon.cpp,651)
ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) The requested target could not be resolved to a valid volume on this computer. Check your task sequence to ensure this drive is correct and that it is being
created The parameter is incorrect. (Error: 80070057; Source: Windows) ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) ResolveTarget( g_Target, g_InstallType == InstallType_DataImage, targetVolume
), HRESULT=80004005 (e:\nts_sccm_release\sms\client\osdeployment\applyos\applyos.cpp,483) ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) Process completed with exit code 2147500037
TSManager 11/18/2014 1:06:58 PM 872 (0x0368) !--------------------------------------------------------------------------------------------! TSManager 11/18/2014 1:06:58 PM
872 (0x0368) Failed to run the action: Apply Data Image 1. Unspecified error (Error: 80004005; Source: Windows) TSManager 11/18/2014 1:06:58 PM 872 (0x0368) MP server http://XXXXSCCM12.XXXXX.XXXXX.
Ports 80,443. CRL=false. TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Setting authenticator TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Set authenticator
in transport TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Sending StatusMessage TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Setting message signatures.
TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Setting the authenticator. TSManager 11/18/2014 1:06:58 PM 872 (0x0368) CLibSMSMessageWinHttpTransport::Send: URL:
XXXXXSCCM12.XXXXX.XXXXX:80 CCM_POST /ccm_system/request TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Request was successful. TSManager 11/18/2014 1:06:58 PM
872 (0x0368) Set a global environment variable _SMSTSLastActionRetCode=-2147467259 TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Set a global environment variable _SMSTSLastActionSucceeded=false
TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Clear XXXXX default environment TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Let the parent group (Install Operating
System) decides whether to continue execution TSManager 11/18/2014 1:06:58 PM 872 (0x0368) The execution of the group (Install Operating System) has failed and the execution has been aborted. An action
failed. Operation aborted (Error: 80004004; Source: Windows) TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Failed to run the last action: Apply Data Image 1. Execution of task sequence failed. Unspecified
error (Error: 80004005; Source: Windows) TSManager 11/18/2014 1:06:58 PM 872 (0x0368) MP server http://XXXXXSCCM12.XXXXX.XXXXX. Ports 80,443. CRL=false. TSManager 11/18/2014
1:06:58 PM 872 (0x0368) Setting authenticator TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Set authenticator in transport TSManager 11/18/2014 1:06:58
PM 872 (0x0368) Sending StatusMessage TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Setting message signatures. TSManager 11/18/2014 1:06:58 PM
872 (0x0368) Setting the authenticator. TSManager 11/18/2014 1:06:58 PM 872 (0x0368) CLibSMSMessageWinHttpTransport::Send: URL: XXXXXSCCM12.XXXXX.XXXXX:80 CCM_POST /ccm_system/request
TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Request was successful. TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Executing command line: X:\WINDOWS\system32\cmd.exe
/k TSBootShell 11/18/2014 1:07:38 PM 764 (0x02FC) The command completed successfully. TSBootShell 11/18/2014 1:07:38 PM 764 (0x02FC) Successfully launched
command shell. TSBootShell 11/18/2014 1:07:38 PM 764 (0x02FC) Execution::enExecutionFail != m_eExecutionResult, HRESULT=80004005 (e:\nts_sccm_release\sms\client\tasksequence\tsmanager\tsmanager.cpp,923)
TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Task Sequence Engine failed! Code: enExecutionFail TSManager 11/18/2014 1:07:43 PM 872 (0x0368) ****************************************************************************
TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Task sequence execution failed with error code 80004005 TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Cleaning Up.
TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Removing Authenticator TSManager 11/18/2014 1:07:43 PM 872 (0x0368) shKey.DeleteValue( c_szRegValue_SecurityToken ),
HRESULT=80070002 (e:\nts_sccm_release\sms\framework\ccmutillib\ccmutillib.cpp,1660) TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Cleaning up task sequence folder TSManager
11/18/2014 1:07:43 PM 872 (0x0368) Unable to delete file D:\_SMSTaskSequence\TSEnv.dat (0x80070005). Continuing. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) hr, HRESULT=80070091
(e:\nts_sccm_release\sms\framework\core\ccmcore\ccmfile.cpp,1218) TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Failed to delete directory 'D:\_SMSTaskSequence' TSManager 11/18/2014
1:07:43 PM 872 (0x0368) (dwRet = ::SetNamedSecurityInfoW ((WCHAR*) pszObjectName, objectType, OWNER_SECURITY_INFORMATION, pOwnerSID, NULL, NULL, NULL)) == ERROR_SUCCESS, HRESULT=80070005 (e:\qfe\nts\sms\framework\tscore\utils.cpp,6675)
TSManager 11/18/2014 1:07:43 PM 872 (0x0368) SetNamedSecurityInfo() failed. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) SetObjectOwner() failed. 0x80070005.
TSManager 11/18/2014 1:07:43 PM 872 (0x0368) SetObjectOwner (szFName, SE_FILE_OBJECT, c_szAdministrators), HRESULT=80070005 (e:\qfe\nts\sms\framework\tscore\utils.cpp,6772) TSManager 11/18/2014
1:07:43 PM 872 (0x0368) RemoveFile() failed for D:\_SMSTaskSequence\TSEnv.dat. 0x80070005. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) RemoveDirectoryW failed (0x80070091) for D:\_SMSTaskSequence
TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Deleting volume ID file C:\_SMSTSVolumeID.7159644d-f741-45d5-ab29-0ad8aa4771ca ... TSManager 11/18/2014 1:07:43 PM 872
(0x0368) DeleteFileW(sVolumeIDFile.c_str()), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\resolvesource.cpp,508) TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Deleting volume ID file D:\_SMSTSVolumeID.7159644d-f741-45d5-ab29-0ad8aa4771ca
... TSManager 11/18/2014 1:07:43 PM 872 (0x0368) DeleteFileW(sVolumeIDFile.c_str()), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\resolvesource.cpp,508) TSManager 11/18/2014
1:07:43 PM 872 (0x0368) Successfully unregistered Task Sequencing Environment COM Interface. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Command line for extension .exe is "%1"
%* TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Set command line: "X:\sms\bin\x64\TsProgressUI.exe" /Unregister TSManager 11/18/2014 1:07:43 PM
872 (0x0368) Executing command line: "X:\sms\bin\x64\TsProgressUI.exe" /Unregister TSManager 11/18/2014 1:07:43 PM 872 (0x0368) ==========[ TsProgressUI started in process 1980 ]==========
TsProgressUI 11/18/2014 1:07:43 PM 624 (0x0270) Command line: "X:\sms\bin\x64\TsProgressUI.exe" /Unregister TsProgressUI 11/18/2014 1:07:43 PM 624 (0x0270)
Unregistering COM classes TsProgressUI 11/18/2014 1:07:43 PM 624 (0x0270) Unregistering class objects TsProgressUI 11/18/2014 1:07:43 PM 624 (0x0270)
Shutdown complete. TsProgressUI 11/18/2014 1:07:43 PM 624 (0x0270) Process completed with exit code 0 TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Successfully
unregistered TS Progress UI. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) g_TSManager.Run(), HRESULT=80004005 (e:\nts_sccm_release\sms\client\tasksequence\tsmanager\tsmanager.cpp,766) TSManager
11/18/2014 1:07:43 PM 872 (0x0368) ::RegQueryValueExW(hSubKey, szReg, NULL, NULL, NULL, &dwSize), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\utils.cpp,811) TSManager 11/18/2014 1:07:43
PM 872 (0x0368) RegQueryValueExW is unsuccessful for Software\Microsoft\SMS\Task Sequence, SMSTSEndProgram TSManager 11/18/2014 1:07:43 PM 872 (0x0368) GetTsRegValue() is unsuccessful.
0x80070002. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) End program: TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Error Task Sequence Manager failed
to execute task sequence. Code 0x80004005 TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Sending error status message TSManager 11/18/2014 1:07:43 PM 872
(0x0368) MP server http://XXXXXSCCM12.XXXXX.XXXXX. Ports 80,443. CRL=false. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Setting authenticator TSManager 11/18/2014 1:07:43
PM 872 (0x0368) Set authenticator in transport TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Sending StatusMessage TSManager 11/18/2014 1:07:43 PM
872 (0x0368) Setting message signatures. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Setting the authenticator. TSManager 11/18/2014 1:07:43 PM 872
(0x0368) CLibSMSMessageWinHttpTransport::Send: URL: XXXXXSCCM12.XXXXX.XXXXX:80 CCM_POST /ccm_system/request TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Request was successful. TSManager
11/18/2014 1:07:43 PM 872 (0x0368) Finalize logging request ignored from process 804 TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Process completed with exit code 2147500037
TSPxe 11/18/2014 1:07:43 PM 864 (0x0360) Task Sequence Manager returned code 0x80004005 TSPxe 11/18/2014 1:07:43 PM 864 (0x0360) ThreadToResolveAndExecuteTaskSequence
returned code 0x00000000 TSPxe 11/18/2014 1:07:43 PM 844 (0x034C) ResolveProgressPage::OnWizardNext() TSPxe 11/18/2014 1:07:43 PM 844 (0x034C) Activating
Finish Page. TSPxe 11/18/2014 1:07:43 PM 844 (0x034C) Exiting with return code 0x00000000 TSPxe 11/18/2014 1:07:43 PM 844 (0x034C) Execution complete.
TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) hMap != 0, HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\environmentscope.cpp,493) TSBootShell 11/18/2014 1:07:43 PM
768 (0x0300) m_pGlobalScope->open(), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\environmentlib.cpp,335) TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) this->open(), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\environmentlib.cpp,553)
TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) ::RegQueryValueExW(hSubKey, szReg, NULL, NULL, NULL, &dwSize), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\utils.cpp,811) TSBootShell
11/18/2014 1:07:43 PM 768 (0x0300) RegQueryValueExW is unsuccessful for Software\Microsoft\SMS\Task Sequence, SMSTSEndProgram TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) GetTsRegValue()
is unsuccessful. 0x80070002. TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) End program: TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) Finalizing
logging from process 760 TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) Finalizing logs to root of first available drive TSBootShell 11/18/2014 1:07:43 PM
768 (0x0300) Successfully finalized logs to D:\SMSTSLog TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) Cleaning up task sequencing logging configuration. TSBootShell
11/18/2014 1:07:43 PM 768 (0x0300)Thank you for the reply, you're right the problem is with an image being applied, but not the OS image.
The issue is that for some reason, there were 2 images captured and SCCM automatically created a step for both. Image 2-2 is the valid Windows image, but image 1-1 clearly has some issues. I disabled the that step in the Task Sequence and it installed drivers
and completed the rest of the Task Sequence! -
Administrator Account Disabled after sysprep and capture task sequence in MDT 2010
Hi
We are currently migrating from Windows XP to windows 7. As part of our migration we have 5 base Images (for different areas of the business)
Here is what we are doing:
Create a reference machine with the source files for windows 7 Pro x86
Install applications as part of the Task sequence to build a reference machine.
Make the updates to the machine - required for the build.
Run the Sysprep and capture template to take the capture of the Reference machine.
Import the Capture into the Operating system folder within MDT2010
Create a task sequecne to deploy the image.
Deploy the Image for Testing.
Deploy the image to a machine
Update the machine with the defects
Re Capture the deployed machine and call it ver2.wim
re deploy ver2.wim
Testers test
Defects logged + additional user settings to be captured in the build
Re capture and sysprep runs says the capture has been succesful however after a reboot the administrator account is disabled.
We cant seem to capture anything from here on in. Nothing has been changed in the unattend.
Autologon is set to enable the administrator account and the password is set to blank as this is then handled by policy when the machine is joined to the domain - we have not enabled the unattended join to the domain at this point in time but it will be
for deploying the image.
Have we got our image strategy wrong? does the same rule apply about sysprep running more than 3 times on a single machine if it is captured and redeployed after a sucessfully sysprep to the same hardware or even different hardware.Hi,
One of the things Sysprep/WAIK do is disable the adminsitrator account.
You mentioned that you are setting the autologing to the administrator account and that you are setting it with a blank password, you can add a simple command in to sysprep's xml to reenable the account:
<component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<RunSynchronous>
<RunSynchronousCommand wcm:action="add">
<Order>1</Order>
<Path>net user administrator /active:yes</Path>
</RunSynchronousCommand>
</RunSynchronous>
</component>
Give it a try and let us know .
Best Regards, Marianok
Saludos, MarianoK
Disclaimer: While I do my best to make sure everything I post is accurate and safe, I’m certainly not perfect so all this information is provided "AS IS" with no warranties or guarantees and confers no rights. Any suggested steps or code provided should be
done under your own risk, I take no responsibilities if your system blows, the universe stops spinning, o nor for any other adverse consequence the information on this code might cause directly or indirectly.
Aclaración: Aunque hago lo posible por verificar que todo lo que posteo es correcto y seguro, Yo ciertamente no soy perfecto y puedo cometer errores, por lo tanto esta informacion es provista "AS IS" / "Como Está" sin garantía alguna y no le confiere ningún
derecho. Cualquier instrucción descripta o código incluido deben ser empleados bajo su propia responsabilidad y bajo su propio riesgo. No me hago responsable si sus datos se dañan, su si
Hi Marianok,
Thanks for your response and taking the time to read the topic we have raised. We believe we already have this step in place but perhaps we have it in the wrong area of the unattend.
Please find below our unattend file for the capture:
<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
<settings pass="windowsPE">
<component name="Microsoft-Windows-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
<ImageInstall>
<OSImage>
<WillShowUI>OnError</WillShowUI>
<InstallTo>
<DiskID>0</DiskID>
<PartitionID>1</PartitionID>
</InstallTo>
<InstallFrom>
<Path>.\Operating Systems\Windows 7 Install Media x86\Sources\install.wim</Path>
<MetaData>
<Key>/image/index</Key>
<Value>1</Value>
</MetaData>
</InstallFrom>
</OSImage>
</ImageInstall>
<UpgradeData>
<Upgrade>false</Upgrade>
</UpgradeData>
<Display>
<ColorDepth>16</ColorDepth>
<HorizontalResolution>1024</HorizontalResolution>
<RefreshRate>60</RefreshRate>
<VerticalResolution>768</VerticalResolution>
</Display>
<ComplianceCheck>
<DisplayReport>OnError</DisplayReport>
</ComplianceCheck>
<UserData>
<AcceptEula>true</AcceptEula>
<ProductKey>
<Key></Key>
</ProductKey>
</UserData>
</component>
<component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<SetupUILanguage>
<UILanguage>en-US</UILanguage>
</SetupUILanguage>
<InputLocale>0409:00000409</InputLocale>
<SystemLocale>en-US</SystemLocale>
<UILanguage>en-US</UILanguage>
<UserLocale>en-US</UserLocale>
</component>
</settings>
<settings pass="generalize">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<DoNotCleanTaskBar>true</DoNotCleanTaskBar>
</component>
</settings>
<settings pass="specialize">
<component name="Microsoft-Windows-UnattendedJoin" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
<Identification>
<Credentials>
<Username></Username>
<Domain></Domain>
<Password></Password>
</Credentials>
<JoinDomain></JoinDomain>
<JoinWorkgroup></JoinWorkgroup>
<MachineObjectOU></MachineObjectOU>
</Identification>
</component>
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
<ComputerName></ComputerName>
<ProductKey></ProductKey>
<RegisteredOrganization>OurCompanyNameHere</RegisteredOrganization>
<RegisteredOwner>Windows User</RegisteredOwner>
<TimeZone></TimeZone>
<DoNotCleanTaskBar>true</DoNotCleanTaskBar>
</component>
<component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<Home_Page>about:blank</Home_Page>
<IEWelcomeMsg>false</IEWelcomeMsg>
</component>
<component name="Microsoft-Windows-Deployment" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<RunSynchronous>
<RunSynchronousCommand wcm:action="add">
<Description>EnableAdmin</Description>
<Order>1</Order>
<Path>cmd /c net user Administrator /active:yes</Path>
</RunSynchronousCommand>
<RunSynchronousCommand wcm:action="add">
<Description>UnfilterAdministratorToken</Description>
<Order>2</Order>
<Path>cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v FilterAdministratorToken /t REG_DWORD /d 0 /f</Path>
</RunSynchronousCommand>
</RunSynchronous>
</component>
<component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<InputLocale>0409:00000409</InputLocale>
<SystemLocale>en-US</SystemLocale>
<UILanguage>en-US</UILanguage>
<UserLocale>en-US</UserLocale>
</component>
<component name="Microsoft-Windows-TapiSetup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<TapiConfigured>0</TapiConfigured>
<TapiUnattendLocation>
<AreaCode>""</AreaCode>
<CountryOrRegion>1</CountryOrRegion>
<LongDistanceAccess>9</LongDistanceAccess>
<OutsideAccess>9</OutsideAccess>
<PulseOrToneDialing>1</PulseOrToneDialing>
<DisableCallWaiting>""</DisableCallWaiting>
<InternationalCarrierCode>""</InternationalCarrierCode>
<LongDistanceCarrierCode>""</LongDistanceCarrierCode>
<Name>Default</Name>
</TapiUnattendLocation>
</component>
<component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<DisableSR>1</DisableSR>
</component>
</settings>
<settings pass="oobeSystem">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
<UserAccounts>
<AdministratorPassword>
<Value>QQBkAG0AaQBuAGkAcwB0AHIAYQB0AG8AcgBQAGEAcwBzAHcAbwByAGQA</Value>
<PlainText>false</PlainText>
</AdministratorPassword>
<LocalAccounts>
<LocalAccount wcm:action="add">
<Description>Temp account</Description>
<DisplayName>Temp account</DisplayName>
<Group>Users</Group>
<Name>TempAccount</Name>
</LocalAccount>
</LocalAccounts>
</UserAccounts>
<AutoLogon>
<Enabled>true</Enabled>
<Username>Administrator</Username>
<Domain></Domain>
<Password>
<Value>UABhAHMAcwB3AG8AcgBkAA==</Value>
<PlainText>false</PlainText>
</Password>
<LogonCount>999</LogonCount>
</AutoLogon>
<Display>
<ColorDepth>32</ColorDepth>
<HorizontalResolution>1024</HorizontalResolution>
<RefreshRate>60</RefreshRate>
<VerticalResolution>768</VerticalResolution>
</Display>
<FirstLogonCommands>
<SynchronousCommand wcm:action="add">
<CommandLine>cscript.exe C:\MININT\Scripts\LiteTouch.wsf /start</CommandLine>
<Description>Lite Touch new OS</Description>
<Order>1</Order>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<CommandLine>cscript.exe D:\MININT\Scripts\LiteTouch.wsf /start</CommandLine>
<Description>Lite Touch new OS</Description>
<Order>2</Order>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<CommandLine>cscript.exe E:\MININT\Scripts\LiteTouch.wsf /start</CommandLine>
<Description>Lite Touch new OS</Description>
<Order>3</Order>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<CommandLine>cscript.exe F:\MININT\Scripts\LiteTouch.wsf /start</CommandLine>
<Description>Lite Touch new OS</Description>
<Order>4</Order>
</SynchronousCommand>
</FirstLogonCommands>
<OOBE>
<HideEULAPage>true</HideEULAPage>
<NetworkLocation>Work</NetworkLocation>
<ProtectYourPC>1</ProtectYourPC>
<SkipUserOOBE>true</SkipUserOOBE>
</OOBE>
<RegisteredOrganization>Ourcomapanynamehere</RegisteredOrganization>
<RegisteredOwner>Windows User</RegisteredOwner>
<TimeZone></TimeZone>
</component>
<component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<InputLocale>0409:00000409</InputLocale>
<SystemLocale>en-US</SystemLocale>
<UILanguage>en-US</UILanguage>
<UserLocale>en-US</UserLocale>
</component>
</settings>
<settings pass="offlineServicing">
<component name="Microsoft-Windows-PnpCustomizationsNonWinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<DriverPaths>
<PathAndCredentials wcm:keyValue="1" wcm:action="add">
<Path>\Drivers</Path>
</PathAndCredentials>
</DriverPaths>
</component>
</settings>
<cpi:offlineImage cpi:source="catalog://pr-dep-03/captureshare$/operating systems/windows 7 install media x86/sources/install_windows 7 professional.clg" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
</unattend>
Hope this helps! -
Administrator account disabled - XP - 10.3 - DLU
Anyone else seeing this?
Using basic DLU, manage existing accounts, user gets created as a "normal" user in the "users" group. This is in a NON-DOMAIN environment.
After logging in as the normal user, and logging out, try to do a workstation only and login as administrator, says the account has been disabled.I've never seen DLU do this.
However, I have seen customers mistakenly believe DLU caused it.
The customers in fact also had a GPO in place with the "Security
settings" portion enabled.
By Default, the option to disable the administrator account is enabled
by default in this policy. Once the GPO setting was corrected, the
issue went away.
On 1/27/2011 2:19 PM, Rick wrote:
> Were you able to fix this as I see it with both XP and Win 7
> >>> wharper<[email protected]> 01/09/2010 4:36 pm >>>
> Anyone else seeing this?
>
> Using basic DLU, manage existing accounts, user gets created as
> a"normal" user in the "users" group. This is in a NON-DOMAINenvironment.
>
> After logging in as the normal user, and logging out, try to do
> aworkstation only and login as administrator, says the account has
> beendisabled.--
> wharper------------------------------------------------------------------------wharper's
> Profile: http://forums.novell.com/member.php?userid=40430View this
> thread: http://forums.novell.com/showthread.php?t=419897
>
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human. -
Administrator account disabled [Not sure if right forum]
So, I have a computer which I have been using the default Administrator account to work with for a while and when I connected to a network at School, it disabled the Administrator account from some random script. I only have a standard user account which
can't really do anything other than browse the internet. Is there any way I could re-enable the account with no administrator privileges? I also don't have a CD drive, because it's a laptop.
ThanksBy not having a spare admin account (why not?) and not having a CD drive you're making life difficult for yourself. You now need to do this:
Burn a Windows Repair CD on some other machine.
Create a
Windows Repair flash disk on some other machine.
Use this disk to boot the problem machine into Repair Mode.
Use System Restore to set Windows back to a point before you ran the bad script.
Create, test and document a spare admin account. This will save you an enormous amount of trouble. -
Server 10.4.4, administrator account has "access account" disabled
Hi,
I allowed a new tech to add users to our Xserve. Somehow he disabled the check box "access acount" in workgroup manager for the only administrator account. It now appears we cannot turn this back on! The end result is you can only access workgroup manager locally.Remote desktop and VNC now won't work. We can't re-enable the "access account" option for the administrator account or create new administrators as our only administrator account is now not active. I have no idea why you should be able to do this, but duplicated the problem on a test machine. If you create an admin account and uncheck the box "access acount" then the server can no longer be adminstrated!
Any ideas?
Daveanswered my own question.
logged in as root and resolved, phew -
Administrator account is disable when deploying windows 7 x64 captured image
I’m using MDT 2012 update 1. I create one deployment share with two task sequence.
The task sequences are: one for windows 7 x86 and the other one is windows 7 x64.
Both are working fine until I try to sysprep and capture with all the windows updates.
Sysprep and capture windows 7 x86 with all windows update work fine. I’m able to deploy the captured image without an error.
My problem is with the windows 7 x64 captured image. I’m able to sysprep and capture the windows7 x64 with all the windows update. Once the capture is completed, I change the .win file in my windows 7 x64 task sequence to point to the new .win file (capture
image with all the windows update). When I deploy windows 7 x64 on a pc, the OS get install but boot up to the sign on screen. The Task sequence does not complete. No error message. Cannot log in as local or domain administrator, account is disable.
Why does it work with my windows 7 x86 image and not with my windows 7 x64 image?
With my windows 7 x86 image the task sequence completed successfully with no error and it logon automatically in windows but not with my windows 7 x64 image.
Both task sequences are the same.
Let me know if any info for this please.
thanksThey should both work, perhaps you missed a step when creating the x64 image.
1. Verify that the Windows 7 x64 image was created cleanly, with no errors. Sysprep ran with no errors.
2. Verify that you created the windows 7 deployment task sequence cleanly. I would do a windiff of the TS.xml and unattend.xml file from both folders in the deployment share.
3. Try running without a domain. Some domain's have a GP set to disable the local administrator account.
Keith Garner - keithga.wordpress.com -
Administrator account keeps getting disabled in SAP BI 4 from time to time.
Hi,
I am working for Ericsson. Recently during a upgrade for a customer, we migrated from SAP BO XI 3 to BI 4 Platform. Everything is running fine, but the Administrator account keeps getting disabled from time to time. They need to login from any other account with Administrator rights to enable the Administrator account to resume operations. What can be done for this problem?Hi,
Try to check if the administrators group have already enough rights.
Also verify if one of the admin users is modifying the rights for the administrator.
Best regards,
Saloua. -
MDT - Can I disable the Administrator account
I found threads on how to turn it on and maybe some on how to turn it off. I already see how to have my task sequence *NOT* enable the administrator account. I just remove the corresponding line in the unattend.xml file. However, are there any repercussions
to this? I already changed what account it automatically logs into.Ultimately what I did was setup Final Configuration 2013,
http://www.deploymentresearch.com/Research/tabid/62/EntryId/122/Final-Configuration-for-MDT-2013-Lite-Touch-now-with-Autologon-support.aspx. I edited it to stop the autologon stuff and added sections to undo what MDT does.
' Disable local administrator account
strComputer = "."
Set objUser = GetObject("WinNT://" & strComputer & "/Administrator")
objUser.AccountDisabled = True
objUser.SetInfo
StatusArea.InnerHTML=StatusArea.InnerHTML & "<BR>" & "Local Administrator Disabled"
'Delete Administrator Filter Change
Set objShell = CreateObject("Wscript.Shell")
objShell.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\FilterAdministratorToken"
StatusArea.InnerHTML=StatusArea.InnerHTML & "<BR>" & "Administrator Filter Change removed" -
Can I disable (or remove) the "migration administrator" account?
I installed a SBS 2011 server about two years ago - and migrated from an old SBS 2003 server.
In the process of migration, a "migration administrator" account was created. Now, I see it in my list of users and was wondering if I missed a step somewhere that should have deleted (or disabled) this account.
Is it safe to disable?Its always a good practice to Disable a NON required account. You can read the description of the user account "If Any" . If its an account that is apart from BuiltInAdministrator, go ahead and delete or disable.
Normally in SBS 2008 and SBS 2011 Domain "Administrator" account as it is disabled by default. This is for security reasons as the most common account for hackers to use when launching an attack on your server is the default administrator account
name. If you need the "Administrator" account for some reason, though I don't recommend using it, it is in AD under the Uses OU not the MyBusiness\Users\SBSUsers OU. You will need to enable it, and assign a password.
Binu Kumar - MCP, MCITP, MCTS , MBA - IT , Director Aarbin Technology Pvt Ltd - Please remember to mark the replies as answers if they help and unmark them if they provide no help. -
Disable Windows 7 Administrator Accounts using Novell Script
Hello, is there a command line I can place in my log in script that will disable the windows 7 administrator account. Or auto log into the administrator account so that I can update the Zimbra connector for 600 users who are using Outlook 2007 and Outlook 2010. The script worked to update the Zimbra connector on 50 of the machines on the network that the users are administrators
Here are my scripts.
Zimbra Script
MAP DISPLAY OFF
MAP ERRORS OFF
#msiexec /quiet /i \\ARTEMIS\sys\zimbra32\ZimbraConnectorOLK_7.1.3.63 47_x86.msi
MAP DISPLAY ON
END
User Container_Script
WRITE "This is container login script"
WRITE "Good %GREETING_TIME: %CN"
WRITE "The Time is %HOUR24: %MINUTE"
DOS SET MAPROOTOFF="1"
;MAP F:=ARTEMIS\SYS:
MAP G:=ARTEMIS\COMMON:
MAP H:=ARTEMIS\USERS:%CN
MAP I:=ARTEMIS\APPS:
IF MEMBER OF "adminReset" THEN
#NET USE R: \\141.217.157.17\software\vmview5\client T3chsRc00l /user:lrctech
END
#G:\LoginScriptInstalls\Admin\changeAP.bat
IF MEMBER OF "Faculty_OSA_DB" THEN
#NET USE O: \\selene.nursing.wayne.edu\osa faculty /user:faculty
@O:\ePOW\k1ePOW.bat
;#command /c copy O:\ePOW\k1ePOW.mdb C:\ePOW\k1ePOW.mdb
;#command /c copy O:\ePOW\k1ePOW-L.mdb C:\ePOW\k1ePOW-L.mdb
END
IF MEMBER OF "osa" THEN
MAP ROOT J:= ARTEMIS\COMMON:\OSA_COMMON
#NET USE O: \\selene.nursing.wayne.edu\osa nursing06 /user:osa
@md C:\OSA2k8
@O:\OSA2k8\OSA2k8.bat
;#command /c copy O:\OSA2k8\osa2k8-L.mdb C:\OSA2k8\osa2k8-L.mdb
;#command /c copy O:\OSA2k8\osa2k8.mdb C:\OSA2k8\osa2k8.mdb
END
IF MEMBER OF "CoN_Calendar" THEN
#NET USE X: \\selene.nursing.wayne.edu\web_datashare faculty /user:faculty
@\\artemis\common\CLASSLISTS\Room_Sch\Calendars.ba t
END
REM Novell SP5 Upgrade
regread "HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion,ProductName"
if "%99" = "Microsoft Windows XP" then
write "Checking for latest version of Novell Client..."
IF PLATFORM = "WNT" THEN
@\\artemis\sys\NwCLIENT\WINNT\i386\acu.exe
IF "@ERROR_LEVEL" = "1" THEN
EXIT
END
END
END
REM TimeSync
regread "HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Da teTime\Servers,0"
if "%99" = "time.wayne.edu" then
regread "HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Da teTime\Servers,"
if "%99" = "0" then
write "Time is synced with Wayne Time!"
else
@\\artemis\common\LoginScriptInstalls\TimeSync\Tim eSync.bat
endif
else
@\\artemis\common\LoginScriptInstalls\TimeSync\Tim eSync.bat
endif
REM WSUS
regread "HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion,ProductName"
IF "%99" = "Microsoft Windows XP" then
regread "HKLM,SOFTWARE\Policies\Microsoft\Windows\WindowsU pdate,WUServer"
IF "%99" = "http://141.217.157.19:8530" then
write "WSUS is up-to-date!"
else
@\\artemis\common\LoginScriptInstalls\WSUS\zoewsus XP.bat
write "WSUS was just connected to the new and IMPROVED update server!"
END
END
regread "HKLM,SOFTWARE\Policies\Microsoft\Windows\WindowsU pdate,WUServer"
if "%99" = "http://141.217.157.19:8530" then
write "WSUS is up-to-date!"
else
@\\artemis\common\LoginScriptInstalls\WSUS\zoewsus NEW.bat
write "WSUS was just connected to the new and IMPROVED update server!"
endif
REM SAV temp
@\\artemis\common\LoginScriptInstalls\Symantec\sav-parent.bat
REM Novell Server - Artemis default; LDAP Athena
@\\artemis\common\LoginScriptInstalls\NovellServer \artemis.bat
REM SAV
regread "HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Un install\{50E125D1-88E5-48CE-80AE-98EC9698E639},DisplayVersion"
if "%99" = "10.1.6000.6" then
regread "HKLM,SOFTWARE\Intel\LANDesk\VirusProtect6\Current Version,Parent"
if "%99" = "SOPHIA" then
write "Symantec Antivirus is connected to SOPHIA!"
else
@\\artemis\common\LoginScriptInstalls\Symantec\sav-parent.bat
write "Symantec Antivirus was updated to connect to SOPHIA!"
endif
else
regread "HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Un install\{2085C617-589C-40F8-BE40-EDBC9E2CA2EB},DisplayVersion"
if "%99" = "10.1.7000.7" then
regread "HKLM,SOFTWARE\Intel\LANDesk\VirusProtect6\Current Version,Parent"
if "%99" = "SOPHIA" then
write "Symantec Antivirus is connected to SOPHIA!"
else
@\\artemis\common\LoginScriptInstalls\Symantec\sav-parent.bat
write "Symantec Antivirus was updated to connect to SOPHIA!"
endif
else
regread "HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Un install\{AD8A1013-4E46-4E02-85C2-3168C3328432},DisplayVersion"
if "%99" = "10.1.8000.8" then
regread "HKLM,SOFTWARE\Intel\LANDesk\VirusProtect6\Current Version,Parent"
if "%99" = "SOPHIA" then
write "Symantec Antivirus is connected to SOPHIA!"
else
@\\artemis\common\LoginScriptInstalls\Symantec\sav-parent.bat
write "Symantec Antivirus was updated to connect to SOPHIA!"
endif
else
regread "HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Un install\{2EFCC193-D915-4CCB-9201-31773A27BC06},DisplayVersion"
if "%99" = "11.0.5002.333" then
write "Symantec EndPoint Antivirus is installed!"
else
write "YOUR ANTIVIRUS IS OUT OF DATE!!!"
write "CONTACT 577-8604 TO HAVE THIS RESOLVED!"
@\\artemis\common\LoginScriptInstalls\Symantec\sen dmail.bat
endif
ENDAd1082,
> MAP DISPLAY OFF
> MAP ERRORS OFF
> net user administrator /active:yes
> #msiexec /quiet /i \\ARTEMIS\sys\zimbra32\ZimbraConnectorOLK_7.1.3.63
> 47_x86.msi
> MAP DISPLAY ON
> END
That should activate the administrator account, yes and then run ine
installer.
> Also can you elaborate more on your statement here? "so if you have
> (another) service login you can try runas or psexec it" I'm confused as
> to what you mean sorry my expertise is limited when it comes to
> scripting.
A command run from the login script, unlike something that is fired off
by ZCM, has no special rights, ie the net use command above will fail,
unless the user is a local administrator equivalent.
One way to get around that is if you have a predefined, local, account
for service and stuff, in that case you could create a batchfile that
pushes down psexec
(http://technet.microsoft.com/en-us/s.../bb897553.aspx)
Then runs it to run the command, ie:
#psexec -u user -p password net user administrator /active:yes
I have done stuff like that in the past, but it is generally a royal pain
to set up.
Anders Gustafsson (NKP)
The Aaland Islands (N60 E20)
Have an idea for a product enhancement? Please visit:
http://www.novell.com/rms -
Administrator account has been disabled
I've taken over support of Crystal Server 4.0 in my organization and was notified by a user that all scheduled jobs were failing with this error:
login error. [CrystalEnterprise.DiskUnmanaged]: [Logon failure: the specified account password has expired.]
I attempted to log into Central Management Console using the 'Administrator' account and password and receive the following:
Account Information Not Recognized: The user account has been disabled. (FWB 00012)Hi David,
Please follow the below steps:
In Your Case only the Folder Name is changed other wise everything is same.
Symptom:
The password for the administrator password is lost and there is no other account with administrator rights to log in the CMC and reset the password for this user
Resolution:
The steps required to perform are detailed in the Installation guide attached in the references section. However, there is one mistake in the order of the steps.
Page 71: Chapter 5.9.1 To reset the SAP BusinessObjects Business Intelligence platform administrator account password
1. Locate the CMS process: launch the Process Explorer utility, and locate CMS.exe.
2. Copy the CMS command to the clipboard. In Process Explorer, copy the "Command line" field.
3. Use the Central Configuration Manager (CCM) to stop the SIA. To launch the CCM, go to Programs > SAP BusinessObjects Enterprise
XI 4.0 > SAP BusinessObjects Enterprise > Central Configuration Manager. Once you have confirmed that the SIA has stopped,
proceed to the next step.
4. Paste the CMS command to a command-line. Do not press Enter. Open a "Command Prompt" window and paste in the contents from step3.
5. Append the -serverconsole switch to the command and press Enter. For example, note that the following command has -serverconsole
appended:
"C:\Program Files (x86)\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\win64_x64\cms.exe" -loggingPath "C:/Program Files (x86)/SAP BusinessObjects/SAP BusinessObjects Enterprise XI 4.0/logging/" -port 6400 -restart -dbinfo "C:/Program Files (x86)/SAP BusinessObjects/SAP BusinessObjects Enterprise XI 4.0/win64_x64/_boe_ACME.dbinfo" -noauditor -autoboot -fg -name ACME.cms - pidfile "C:/Program Files (x86)/SAP BusinessObjects/SAP BusinessObjects Enterprise XI 4.0/serverpids/ACME_ACME.CentralManagementServer.pid" -serverconsole
The SIA is launched in serverconsole mode. You will be prompted when the SIA is ready to accept commands.
6. Go to the following folder: <BOE_INSTALL_DIR>\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\dfo The dfo folder
contains a subfolder with a randomly generated name starting with dfo_.
7. Copy the file named BusinessObjects_Administrator_dfo.xml from inside the dfo_ folder to the following folder:
<BOE_INSTALL_DIR>\SAP BusinessObjects Enterprise XI 4.0\packages
8. Enter the following query: select si_id from ci_systemobjects where si_name='Administrator' Four objects are returned. Record the
SI_ID for each object.
Tip: One of the entries should have the SI_ID set to 12.
9. Delete the objects by typing the following command for each object: delete <ID_NUMBER>
10. Verify that the objects have been deleted by re-entering the command from step 8: select si_id from ci_systemobjects where
si_name='Administrator'
No objects should be returned.
11. Enter the following query: select si_id from ci_systemobjects where si_name='BusinessObjects_Administrator_dfo.xml' One object should be returned. Record the object's SI_ID number.
12. Delete the object by entering the following command: delete <SI_ID>
13. Type quit to exit.
14. Use the CCM to start the SIA.
15. Launch the CCM, go to Programs > SAP BusinessObjects Enterprise XI 4.0 > SAP BusinessObjects Enterprise > Central Configuration Manager.
You can now log on to the administrator account without having to provide password (leave the "Password" field blank).
Hope this will help you as well.
Thanks,
Daya -
After enabling the Built-in Administrator account, it is not shown on Welcome screen
Hello,
I have Windows 7 Starter SP1.
I have previously successfully enabled and then logged on, to the built-in administrator account, and then when I had finished using it, disabled it again.
Unfortunately today, I found that when I enabled the built-in administrator account, it no longer appears on the Welcome screen.
I went through the process of enabling it by doing:
Start/Search "CMD"/right-click CMD/Run as administrator.
net user administrator active:yes
It confirms: "The command completed successfully."
However, when I log off and log back on (or do shut down and restart), the Welcome screen does not display any option for the Built-in Administrator account.
I have also tried doing the above in Safe mode, and also using Command Prompt from a Rescue disk.
As background information:
The reason why I wanted to access this account today, was because I attempted to defrag a partition listed as "(1% fragmented)" and after Defrag appeared to complete while at "Pass 2", the partition is still shown as 1% fragmented.
I would appreciate advice how to resolve the issue with the built-in administrator account.
Regards,
Robert339Hello Niki Han,
Thank you for your response. I have not yet had an opportunity to look into what you have written but wish to thank you for that information.
Meanwhile, I would like to discuss the possible cause for this issue. I know the date when I last successfully accessed the built-in Administrator account, which was April 18, 2012.
Since I was last able to use that account on April 18, 2012, I have made no changes to the system other than install all Important Microsoft Updates through Windows Update.
A full scan with Windows Defender finds no threats.
A full scan with Avast finds no threats.
I beleive Microsoft may wish to ensure that this issue has not been caused by any of the following 30 updates. If it has been caused by one of these updates, then Microsoft should consider issuing a further update to correct this.
- - - Extract from Windows Update History for period April 18, 2012 and the date I noticed this issue of May 18, 2012, Starts: - - - -
Definition Update for Windows Defender - KB915597 (Definition 1.125.1635.0)
Installation date: 13/05/2012 19:31
Security Update for Microsoft Silverlight (KB2636927)
Installation date: 10/05/2012 15:44
Windows Malicious Software Removal Tool - May 2012 (KB890830)
Installation date: 09/05/2012 22:51
Update Rollup for ActiveX Killbits for Windows 7 (KB2695962)
Installation date: 09/05/2012 22:45
Definition Update for Windows Defender - KB915597 (Definition 1.125.1373.0)
Installation date: 09/05/2012 22:45
Security Update for Microsoft Silverlight (KB2690729)
Installation date: 09/05/2012 22:45
Security Update for Microsoft Office 2007 suites (KB2596880)
Installation date: 09/05/2012 22:33
Security Update for Microsoft Office Excel 2007 (KB2597161)
Installation date: 09/05/2012 22:32
Security Update for Microsoft Office Word 2007 (KB2596917)
Installation date: 09/05/2012 22:31
Security Update for Microsoft Office 2007 suites (KB2596672)
Installation date: 09/05/2012 22:31
Security Update for Microsoft Office 2007 suites (KB2597969)
Installation date: 09/05/2012 22:29
Security Update for Microsoft Office 2007 suites (KB2597162)
Installation date: 09/05/2012 22:28
Security Update for Microsoft Office 2007 suites (KB2596792)
Installation date: 09/05/2012 22:27
Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 SP1 x86 (KB2604115)
Installation date: 09/05/2012 22:16
Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2656405)
Installation date: 09/05/2012 22:16
Security Update for Windows 7 (KB2688338)
Installation date: 09/05/2012 22:12
Security Update for Windows 7 (KB2660649)
Installation date: 09/05/2012 22:12
Security Update for Windows 7 (KB2659262)
Installation date: 09/05/2012 22:11
Security Update for Windows 7 (KB2676562)
Installation date: 09/05/2012 22:11
Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 SP1 x86 (KB2656411)
Installation date: 09/05/2012 22:11
Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2604121)
Installation date: 09/05/2012 22:11
Security Update for Windows 7 (KB2690533)
Installation date: 09/05/2012 22:04
Security Update for Windows 7 (KB2658846)
Installation date: 09/05/2012 22:04
Definition Update for Windows Defender - KB915597 (Definition 1.125.1137.0)
Installation date: 06/05/2012 14:54
Definition Update for Windows Defender - KB915597 (Definition 1.125.1090.0)
Installation date: 03/05/2012 23:48
Definition Update for Windows Defender - KB915597 (Definition 1.125.886.0)
Installation date: 02/05/2012 15:09
Definition Update for Windows Defender - KB915597 (Definition 1.125.655.0)
Installation date: 28/04/2012 23:55
Definition Update for Windows Defender - KB915597 (Definition 1.125.402.0)
Installation date: 25/04/2012 01:08
Definition Update for Windows Defender - KB915597 (Definition 1.125.146.0)
Installation date: 20/04/2012 16:10
Definition Update for Windows Defender - KB915597 (Definition 1.123.1936.0)
Installation date: 18/04/2012 15:55
- - - - End of Extract from Windows Update History - - - - -
Ok, so about six months ago, my company let go of their Systems Administrator because she was causing many problems in the workplace... Yesterday morning i logged onto the server and found several files open with her name on them, including her confidentiality
agreement, and Employment offer letter, as well as the confidential folder that holds all employees personal identity information (she remote into the Server about 10 Minutes before i logged in, thus kicking her off not allowing her to close what she was opening/copying.
I attempted to check the logs to see what IP she was connecting with but was only able to find the following:
She remoted into the server about through Remote Desktop about 20 times on the 27th of May 2014, (horrible weather and she was probably logging in in a McDonald's Wifi and it kept kicking her off).
I took the day off because my area was flooded and couldnt make it to work.
She logged on, on the 28th of May, 2014 about 16 times before i logged on kicking her off, leaving everything she was doing open for me to see.
Everytime i remote into the server from my house or the office i get the following...
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-TerminalServices-RemoteConnectionManager" Guid="{C76BAA63-AE81-421C-B425-340B4B24157F}"
/>
<EventID>1149</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x1000000000000000</Keywords>
<TimeCreated
SystemTime="2014-05-28T03:24:49.860045100Z" />
<EventRecordID>1943</EventRecordID>
<Correlation
/>
<Execution ProcessID="3884" ThreadID="3868" />
<Channel>Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational</Channel>
<Computer>Servername.server.local</Computer>
<Security UserID="S-1-5-20" />
</System>
<UserData>
<EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="Event_NS">
<Param1>Administrator</Param1>
<Param2>ServerName</Param2>
<Param3>IP.IP.IP.IP</Param3>
</EventXML>
</UserData>
</Event>
when she would log in, there was no IP address everytime except the first time she logged in it seems, and looks like the following.. The first time she logged in remotley I have an IP address that seems to belong to a McDonalds using AT&T wifi,
and was able to trace it to the center of town, and get a Longitude/Latitude...
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-TerminalServices-RemoteConnectionManager" Guid="{C76BAA63-AE81-421C-B425-340B4B24157F}"
/>
<EventID>261</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x1000000000000000</Keywords>
<TimeCreated
SystemTime="2014-05-28T17:25:03.210845100Z" />
<EventRecordID>1969</EventRecordID>
<Correlation
/>
<Execution ProcessID="3884" ThreadID="4224" />
<Channel>Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational</Channel>
<Computer>Servername.Server.local</Computer>
<Security UserID="S-1-5-20" />
</System>
<UserData>
<EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="Event_NS">
<listenerName>RDP-Tcp</listenerName>
</EventXML>
</UserData>
</Event>
As you can see no IP address is shown unlike everyone other PC that remotes into the server... She has been using our server as her personal file host for her real estate business, she was fired last year for sabotaging AutoCad drawings her ex boyfriend
was working on (they are back together and was the one she set up with full access to server) and she has been adding and modifying files in her group drive via the administrator account. She also disabled several roles we had installed, and gave her
boyfriend (who happens to work at the company) More administrator right than myself, as I built the server from ground up, and Only the Company owners had access to remote desktop, besides the administrator account... I want to make sure she didn't create
any hidden accounts that she can still log into.. I found under ADSI Edit Under Domain Controllers, Subscription Properties an account (servername$) which doesn't not show up in active directory, but had full access to everything... Is there a way to uncover
hidden Accounts she may have created to get into the server, as I've know from previous experiences, that $ sign normally refers to a hidden account or file of some sort.. Any help with this would be greatly appreciated, The FBI is currently investigating
the situation, but i am trying to make sure all my basis are covered so this doesn't happen again... Thank you for taking the time to read my long ass thread, I will bestow upon you great fortune and Karma for any help given =-DHello,
the $ behind the machine name object is normal.
For security related questions please use
http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserversecurity
Also I would immediately remove all people form any kind of administrative groups, MUST of course be agreed from the company owner, then change the administrator account password. If there is a need for the additional administrators the company chief
has to agree on this and there should also be made some clear rules, maybe from a lawyer about consequences etc. Remote access to the network should be blocked or made more secure with two factor authentication, tokens for example, just using Remote Desktop
at the moment I would not allow until the network is better secured and you can be sure there are no unknown administrative accounts.
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights. -
MDT 2012 - Litetouch deploy windows 8 with different administrator account
I have created and captured a custom image of Windows 8 using MDT2012 update 1 and Windows ADK (without SCCM). In the image, I have set an account called DeployUser, with password XXX, adding it to the Administrators group, and I have disabled the User
Account Control.
I did this because the Administrator account is renamed from GPO and the password is changed every 30 days (for security reasons, the password is not disclosed to any IT support).
Next, I created a TS to deploy this image, adding the installation of some software.
In the Unattend.xml, I also added DeployUser to perform the autologon.
After the first logon with DeployUser, the TS stops and does not return any error message.
If I manually run C: \ ProgramData \ Microsoft \ Windows \ Start Menu \ Programs \ Start-up \ LiteTouch.lnk nothing happens, however, if I run it with "Run as Administrator", the TS continues normally.
Somebody who knows a solution for this?I believe MDT LiteTouch deployments only recognize the Administrator account name for processing task sequences.
Are you joining the domain during an MDT Litetouch deployment? If so, you may want to delay joining to a domain or GPO processing. Take a look at these recommendations:
Domain Policies that break MDT 2010
It may also be possible to disable GPO processing until the end of the taks sequence via a reghack or disabling a service. Take a look at this:
How to Disable/Enable Group Policy
BTW, the task sequence engine in ConfigMgr prevents GPO processing during an OSD.
V/R, Darrick West - Senior Systems Engineer, ConfigMgr: OSD
Maybe you are looking for
-
Billing document with email output
Hi, I have completed all the config to get my billing documents to output via email. However i cannot get VF31 to automatically generate the output for these. Only works if i manually assign output with VF02. Can anyone advise in simple steps what ne
-
JDK 1.5 parser & parser properties listing..
Hi. I'd like to know, which parser is bundled with JDK1.5. Is it still Crimson? Also, i am trying to get properties of GNU JAXP dom implementation. Something I am doing wrong, because my app only says, that it supports only Core and XML - modules, an
-
Reading data from multiple excel sheets
hi all i have to read the data from excel file's sheet1 and sheet3. how can i do this using forms6i thanks.
-
Please help. I am trying to sync my two libraries but my ipad is not showing up on my laptop. I cant even get the share menu to pop up.
-
Categorizatoin Deactivated in Web UI
Dear Experts, I am using the Servicepro business role in Web UI. Here when i create the servcie transaction in webui. Categorization field is showing deactivated. Kindly suggest me how to solve this problem. Is there anything to be done at businessr