Built-in administrator account

Dear All,
    I was searching for the best way to secure the Built-in Administrator account on Active Directory and found the below two options suggested from Mircosoft. I would appreciate your help in recommending the best option:
1. rename account
http://technet.microsoft.com/en-us/library/cc700835.aspx
2. disable its access
http://technet.microsoft.com/en-us/library/dn535492.aspx
Regards,
Elham
Hiam

Hi,
I would say renaming the account and generate a strong password would be a good choice.
Rehards,
Calin

Similar Messages

  • After enabling the Built-in Administrator account, it is not shown on Welcome screen

    Hello,
    I have Windows 7 Starter SP1.
    I have previously successfully enabled and then logged on, to the built-in administrator account,  and then when I had finished using it, disabled it again.
    Unfortunately today, I found that when I enabled the built-in administrator account, it no longer appears on the Welcome screen.
    I went through the process of enabling it by doing:
    Start/Search "CMD"/right-click CMD/Run as administrator.
    net user administrator active:yes
    It confirms: "The command completed successfully."
    However, when I log off and log back on (or do shut down and restart), the Welcome screen does not display any option for the Built-in Administrator account.
    I have also tried doing the above in Safe mode, and also using Command Prompt from a Rescue disk.
    As background information:
    The reason why I wanted to access this account today, was because I attempted to defrag a partition listed as "(1% fragmented)" and after Defrag appeared to complete while at "Pass 2",  the partition is still shown as 1% fragmented.
    I would appreciate advice how to resolve the issue with the built-in administrator account.
    Regards,
    Robert339

    Hello Niki Han,
    Thank you for your response. I have not yet had an opportunity to look into what you have written  but wish to thank you for that information.
    Meanwhile, I would like to discuss the possible cause for this issue. I know the date when I last successfully accessed the built-in Administrator account, which was April 18, 2012. 
    Since I was last able to use that account on April 18, 2012, I have made no changes to the system other than install all Important Microsoft Updates through Windows Update.
    A full scan with Windows Defender finds no threats.
    A full scan with Avast finds no threats.
    I beleive Microsoft may wish to ensure that this issue has not been caused by any of the following  30 updates. If it has been caused by one of these updates, then Microsoft should consider issuing a further update to correct this.
     - - -  Extract from Windows Update History for period April 18, 2012 and the date I noticed this issue of May 18, 2012, Starts: - - - -
    Definition Update for Windows Defender - KB915597 (Definition 1.125.1635.0)
    Installation date: 13/05/2012 19:31
    Security Update for Microsoft Silverlight (KB2636927) 
    Installation date: 10/05/2012 15:44
    Windows Malicious Software Removal Tool - May 2012 (KB890830) 
    Installation date: 09/05/2012 22:51
    Update Rollup for ActiveX Killbits for Windows 7 (KB2695962) 
    Installation date: 09/05/2012 22:45
    Definition Update for Windows Defender - KB915597 (Definition 1.125.1373.0) 
    Installation date: 09/05/2012 22:45
    Security Update for Microsoft Silverlight (KB2690729) 
    Installation date: 09/05/2012 22:45
    Security Update for Microsoft Office 2007 suites (KB2596880) 
    Installation date: 09/05/2012 22:33
    Security Update for Microsoft Office Excel 2007 (KB2597161) 
    Installation date: 09/05/2012 22:32
    Security Update for Microsoft Office Word 2007 (KB2596917) 
    Installation date: 09/05/2012 22:31
    Security Update for Microsoft Office 2007 suites (KB2596672) 
    Installation date: 09/05/2012 22:31
    Security Update for Microsoft Office 2007 suites (KB2597969) 
    Installation date: 09/05/2012 22:29
    Security Update for Microsoft Office 2007 suites (KB2597162) 
    Installation date: 09/05/2012 22:28
    Security Update for Microsoft Office 2007 suites (KB2596792) 
    Installation date: 09/05/2012 22:27
    Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 SP1 x86 (KB2604115) 
    Installation date: 09/05/2012 22:16
    Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2656405) 
    Installation date: 09/05/2012 22:16
    Security Update for Windows 7 (KB2688338) 
    Installation date: 09/05/2012 22:12
    Security Update for Windows 7 (KB2660649) 
    Installation date: 09/05/2012 22:12
    Security Update for Windows 7 (KB2659262) 
    Installation date: 09/05/2012 22:11
    Security Update for Windows 7 (KB2676562) 
    Installation date: 09/05/2012 22:11
    Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 SP1 x86 (KB2656411) 
    Installation date: 09/05/2012 22:11
    Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2604121) 
    Installation date: 09/05/2012 22:11
    Security Update for Windows 7 (KB2690533) 
    Installation date: 09/05/2012 22:04
    Security Update for Windows 7 (KB2658846) 
    Installation date: 09/05/2012 22:04
    Definition Update for Windows Defender - KB915597 (Definition 1.125.1137.0) 
    Installation date: 06/05/2012 14:54
    Definition Update for Windows Defender - KB915597 (Definition 1.125.1090.0) 
    Installation date: 03/05/2012 23:48
    Definition Update for Windows Defender - KB915597 (Definition 1.125.886.0) 
    Installation date: 02/05/2012 15:09
    Definition Update for Windows Defender - KB915597 (Definition 1.125.655.0) 
    Installation date: 28/04/2012 23:55
    Definition Update for Windows Defender - KB915597 (Definition 1.125.402.0) 
    Installation date: 25/04/2012 01:08
    Definition Update for Windows Defender - KB915597 (Definition 1.125.146.0) 
    Installation date: 20/04/2012 16:10
    Definition Update for Windows Defender - KB915597 (Definition 1.123.1936.0) 
    Installation date: 18/04/2012 15:55
    - - - - End of Extract from Windows Update History - - - -

  • Factory set password for Windows Vista built-in administrator account?

    I am attempting access the Vista built-in administrator account, which normally is not passworded unless the user does so. Mine, however, has a password that was set 11/20/2010 at 9:57:24 PM.
    Was this p/w set by Toshiba? I assume so, as it was purchased directly from Toshiba. If so, any idea what that p/w would be?  I need to use this account to recover my own admin account due to this error: The User Profile Service failed the logon. User profile cannot be loaded.
    Machine is a Satellite P300 S/N 29020124W, Part # PSPC8U-01G00Q.
    Thanks.

    Satellite P300-ST3712
       You receive a "The User Profile Service failed the logon” error message
        How to Fix the Error "Your user profile was not loaded correctly! You have been logged on with a tem...
    Was this p/w set by Toshiba?
    No. But some programs like the Google Updater (if you added the Google Toolbar, Chrome or Google Earth) have been known to cause this problem. 
    -Jerry

  • Not Able to Promote DC to server even i am using built in Administrator Account.

    hi,
    i am facing below mentioned issue from last 4 to 5 days and i am very frustrating about this error and nobody give me a proper solution. if any anybody facing this kind of issue please give me a solution this will very helpful for me. 
    "Windows Server 2012 domain controllers have a default for the security setting named "Allow cryptography algorithms compatible with Windows NT 4.0" that prevents weaker cryptography algorithms when establishing security channel sessions."
    Thanks & Regards,
    Sushant Chavan.

    Hi Sushant,
    >>Not Able to Promote DC to server even i am using built in  Administrator Account.
    I have seen your thread "Verification of prerequisites for Domain Controller promotion failed" and provided a reply.
    Verification of prerequisites for Domain Controller promotion failed
    http://social.technet.microsoft.com/Forums/en-US/23f33ffa-a847-47bc-81d4-569f8e195886/verification-of-prerequisites-for-domain-controller-promotion-failed?forum=winserver8gen
    In the reply, it provides a step-to-step guidance for setting up a Windows Server 2012 Domain Controller. Have we followed it to promote the server?
    Best regards,
    Frank Shen

  • Enabling Windows Server 2008 R2 Built-In Administrator Account

    The properties box for my Windows Server 2008 R2 built-in administrator program says the account is disabled.  Even the primary user account has virtually no priveliges.  How can I, with a mere primary user account available at logon, enable
    the built-in administrator account, or otherwise grant my primary user account administrator priveliges?  Windows Server 2008 R2 denies my primary user account access/permission for nearly all changes to accounts, programs and OS features. 
    Stephen W Plunkett

    The properties box for my Windows Server 2008 R2 built-in administrator program says the account is disabled.  Even the primary user account has virtually no priveliges.  How can I, with a mere primary user account available at logon,
    enable the built-in administrator account, or otherwise grant my primary user account administrator priveliges?  Windows Server 2008 R2 denies my primary user account access/permission for nearly all changes to accounts, programs and OS features. 
    Stephen W Plunkett
    In some of the organisations, default admin accounts on member servers are purposefully locked/disabled through group policy for security reasons.
    If you know the password for locked out/disabled admin account then there is a possibility of unlocking/re-enabling the account without using any third party tools.
    To do that,
    Restart the server
    Press F8 and select Safe Mode Without
    Networking
    Log on to the server with locked out/disabled admin account with its password.
    If you could successfully log on to the server then you will have option to unlock and enable the built-in admin account !
    Most of the downtime's are caused because of SysAdmin's curiosity ! - Santosh

  • Unable to enroll fingerprints for the Win7 built-in Administrator account

    In Windows 7 I tried to enroll fingerprints for the built-in Administrator account, but doing so failed every time with the error message The enrollment could not be completed.
    I could not find a solution online and the Validity software was working just fine, as there were no issues with other users on the same system. As a work-around, I created another account with administrator privileges and enrolling the fingerprints worked just fine. My guess is that the permissions for the built-in Administrator account are different from any administrator account you can create yourself. What I noticed is that any self created account is part of the Users group, and that the built-in Administrator account is not part of this group. I'm not sure, but maybe this is the cause of the problem.
    Anyway, I thought I would share my experience here, in case anyone else encounters the same problem.

    same issue in build 10049.
    It would help to be more specific in the symptom description.  E.g. using Narrator may help.  (Win-Enter).  Does it say what you are "seeing" (or should be seeing)?
    FWIW I think it is relatively easy to reproduce symptoms which are related to this thread's description using Narrator (Start Screen without Search bar, Search bar without Taskbar, or Search bar with Taskbar but without Start Menu
    when the only time that the Search bar should appear is when the Start Menu is there, for example) so that could also help specify what your real symptom is.  BTW there are horrendous delays when using Narrator.
    Robert Aldwinckle

  • IE 11, built-in Administrator account, window.open method, JA KB 2909974 exists.. not EN-US ?

    As per title....
    The JA KB (when translated) states,
    If you use the built-in Administrator in Internet Explorer 11, when you open a new window named, such as window.open method, window name is not recognized.
    Therefore, the following phenomenon will occur.
    If you specify in the window.open method of the window named, rather than a window that is already open, URL is displayed in a new tab or new window
    If you specify in the target attribute of the link or form window named, not the window that is already open, URL is displayed in a new tab or new window
    What's Microsoft's comments on tracking to a resolution of this ?

    luca wrote:
    Hi krazyshane,
    try to add this directive in Section "Device":
    Option "DRI" "true"
    This got it!  Thanks! 
    Shane

  • Windows 10 Built-in Administrator account?

    Well, that's a drag! So a domain administrator cannot use native apps?
    I also don't understand why the OS is reporting the user as "Built-in administrator" as that is not the case.

    I upgraded a Lenovo T530 from Windows 7 to Windows 10. It is joined to our domain and I am logged in as domain\administrator. Most everything works except many (all?) of the native Windows apps, Edge and calendar for example. When I try to open the app I see this:
    This topic first appeared in the Spiceworks Community

  • Msiexec /qn fails when its not run using the built-in local administrator account

    Hello all,
    I am working on a project where I am trying to automate the deployment of VMs through a self-service portal.
    Among other tasks such as clone VM, sysprep it, assign an IP, create AD computer object, join VM to domain and so on..., i need to install a few applications using msiexec, which is driving me crazy...
    For this purpose, I am using a local user account part of the administrators group.
    Please note, UAC is disabled on all the OS.
    Basically, the msi installation works as expected on Windows 7 machines, however on Windows 8/2012, it fails due to lack of permissions. The curious thing is that if I use the built-in\administrator account instead for the deployment on those systems, the
    application is installed correctly.
    I have tested some things such as: DisableMSI (http://msdn.microsoft.com/en-us/library/aa368304%28v=vs.85%29.aspx), but although it progresses a bit further, it keeps failing.
    Does anyone know what I can do to allow an user part of the administrators local group to be able to install using msiexec /qn?
    Thanks in advance.

    Hi,
    Does it work if you use the account in local admin, and run the commands prompt as administrator to install the msi file? Please know that Only the built in administrator account has admin privilege by default. On other admin accounts you need
    to run with elevated privilege (ie runas).
    I would like to know if you use SCCM to perform your deployment with task sequence.
    As I known, even if you disable UAC, the following policy is still enabled to detect application installation.
    Computer configuration\Windows settings\Security Settings\Local
    Policies\Security Options -> User Account Control: Detect application installations and prompt for elevation policy
    Please disable this policy to see if your issue can be fixed. 
    Kate Li
    TechNet Community Support

  • SCCM 2012 R2 CU3 - Drivers Not Installing, Local Administrator Account Disabled

    After PXE OSD for a Thick Image of Win 7 x64 Ent completes, several Task Sequence steps are not complete. Namely, 3 device drivers are missing (NIC, SM Bus and some other chipset driver), the built-in Administrator Account is disabled and it's not Domain
    joined.
    I have already re-created the thick WIM twice. It was built in a VMware VM then captured with SCCM Capture Media. The NIC is a Realtek and I have downloaded the most recent version of the drivers from HP's site and added them to a driver package which is
    deployed. I even added several older drivers to my Boot Image and created to 2 steps to add drivers in the Task Sequence - one automatically installs the best drivers, the other installs a package with 7 NIC drivers. When I get the error during PXE OSD, I
    press F8 and the machine has an IP address and the driver for the NIC appears to be correct. Upon rebooting, Windows completes setup but the Administrator Account is not enabled and the NIC driver is missing, etc.
    Here is the portion of the log where errors begin to show up (from D:\SMSTSLog). Any help is GREATLY appreciated!!
    !--------------------------------------------------------------------------------------------!    TSManager    11/18/2014 1:06:57 PM    872 (0x0368) Expand a string: WinPE    TSManager  
     11/18/2014 1:06:58 PM    872 (0x0368) Executing command line: OSDApplyOS.exe /data:XXXXX0001A,%OSDDataImageIndex%    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Command line for extension
    .exe is "%1" %*    ApplyOperatingSystem    11/18/2014 1:06:58 PM    1040 (0x0410) Set command line: "OSDApplyOS.exe" /data:XXXXX0001A,1    ApplyOperatingSystem    11/18/2014
    1:06:58 PM    1040 (0x0410) Searching for next available volume:    ApplyOperatingSystem    11/18/2014 1:06:58 PM    1040 (0x0410)   Volume C:\ has already used.    ApplyOperatingSystem  
     11/18/2014 1:06:58 PM    1040 (0x0410)   Volume D:\ has already used.    ApplyOperatingSystem    11/18/2014 1:06:58 PM    1040 (0x0410)   Volume E:\ is not a XXXXX hard drive.  
     ApplyOperatingSystem    11/18/2014 1:06:58 PM    1040 (0x0410)   Volume X:\ is not a XXXXX hard drive.    ApplyOperatingSystem    11/18/2014 1:06:58 PM    1040 (0x0410) it
    != volumes.end(), HRESULT=80004005 (e:\nts_sccm_release\sms\client\osdeployment\applyos\installcommon.cpp,519)    ApplyOperatingSystem    11/18/2014 1:06:58 PM    1040 (0x0410) There are no more volumes available
    for use.    ApplyOperatingSystem    11/18/2014 1:06:58 PM    1040 (0x0410) GetNextAvailableVolume(allowFAT, volume), HRESULT=80004005 (e:\nts_sccm_release\sms\client\osdeployment\applyos\installcommon.cpp,651)  
     ApplyOperatingSystem    11/18/2014 1:06:58 PM    1040 (0x0410) The requested target could not be resolved to a valid volume on this computer. Check your task sequence to ensure this drive is correct and that it is being
    created The parameter is incorrect. (Error: 80070057; Source: Windows)    ApplyOperatingSystem    11/18/2014 1:06:58 PM    1040 (0x0410) ResolveTarget( g_Target, g_InstallType == InstallType_DataImage, targetVolume
    ), HRESULT=80004005 (e:\nts_sccm_release\sms\client\osdeployment\applyos\applyos.cpp,483)    ApplyOperatingSystem    11/18/2014 1:06:58 PM    1040 (0x0410) Process completed with exit code 2147500037  
     TSManager    11/18/2014 1:06:58 PM    872 (0x0368) !--------------------------------------------------------------------------------------------!    TSManager    11/18/2014 1:06:58 PM  
     872 (0x0368) Failed to run the action: Apply Data Image 1. Unspecified error (Error: 80004005; Source: Windows)    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) MP server http://XXXXSCCM12.XXXXX.XXXXX.
    Ports 80,443. CRL=false.    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Setting authenticator    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Set authenticator
    in transport    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Sending StatusMessage    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Setting message signatures.  
     TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Setting the authenticator.    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) CLibSMSMessageWinHttpTransport::Send: URL:
    XXXXXSCCM12.XXXXX.XXXXX:80  CCM_POST /ccm_system/request    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Request was successful.    TSManager    11/18/2014 1:06:58 PM  
     872 (0x0368) Set a global environment variable _SMSTSLastActionRetCode=-2147467259    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Set a global environment variable _SMSTSLastActionSucceeded=false  
     TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Clear XXXXX default environment    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Let the parent group (Install Operating
    System) decides whether to continue execution    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) The execution of the group (Install Operating System) has failed and the execution has been aborted. An action
    failed. Operation aborted (Error: 80004004; Source: Windows)    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Failed to run the last action: Apply Data Image 1. Execution of task sequence failed. Unspecified
    error (Error: 80004005; Source: Windows)    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) MP server http://XXXXXSCCM12.XXXXX.XXXXX. Ports 80,443. CRL=false.    TSManager    11/18/2014
    1:06:58 PM    872 (0x0368) Setting authenticator    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Set authenticator in transport    TSManager    11/18/2014 1:06:58
    PM    872 (0x0368) Sending StatusMessage    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Setting message signatures.    TSManager    11/18/2014 1:06:58 PM  
     872 (0x0368) Setting the authenticator.    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) CLibSMSMessageWinHttpTransport::Send: URL: XXXXXSCCM12.XXXXX.XXXXX:80  CCM_POST /ccm_system/request  
     TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Request was successful.    TSManager    11/18/2014 1:06:58 PM    872 (0x0368) Executing command line: X:\WINDOWS\system32\cmd.exe
    /k    TSBootShell    11/18/2014 1:07:38 PM    764 (0x02FC) The command completed successfully.    TSBootShell    11/18/2014 1:07:38 PM    764 (0x02FC) Successfully launched
    command shell.    TSBootShell    11/18/2014 1:07:38 PM    764 (0x02FC) Execution::enExecutionFail != m_eExecutionResult, HRESULT=80004005 (e:\nts_sccm_release\sms\client\tasksequence\tsmanager\tsmanager.cpp,923)  
     TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Task Sequence Engine failed! Code: enExecutionFail    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) ****************************************************************************  
     TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Task sequence execution failed with error code 80004005    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Cleaning Up.  
     TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Removing Authenticator    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) shKey.DeleteValue( c_szRegValue_SecurityToken ),
    HRESULT=80070002 (e:\nts_sccm_release\sms\framework\ccmutillib\ccmutillib.cpp,1660)    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Cleaning up task sequence folder    TSManager  
     11/18/2014 1:07:43 PM    872 (0x0368) Unable to delete file D:\_SMSTaskSequence\TSEnv.dat (0x80070005). Continuing.    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) hr, HRESULT=80070091
    (e:\nts_sccm_release\sms\framework\core\ccmcore\ccmfile.cpp,1218)    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Failed to delete directory 'D:\_SMSTaskSequence'    TSManager    11/18/2014
    1:07:43 PM    872 (0x0368) (dwRet = ::SetNamedSecurityInfoW ((WCHAR*) pszObjectName, objectType, OWNER_SECURITY_INFORMATION, pOwnerSID, NULL, NULL, NULL)) == ERROR_SUCCESS, HRESULT=80070005 (e:\qfe\nts\sms\framework\tscore\utils.cpp,6675)  
     TSManager    11/18/2014 1:07:43 PM    872 (0x0368) SetNamedSecurityInfo() failed.    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) SetObjectOwner() failed. 0x80070005.  
     TSManager    11/18/2014 1:07:43 PM    872 (0x0368) SetObjectOwner (szFName, SE_FILE_OBJECT, c_szAdministrators), HRESULT=80070005 (e:\qfe\nts\sms\framework\tscore\utils.cpp,6772)    TSManager    11/18/2014
    1:07:43 PM    872 (0x0368) RemoveFile() failed for D:\_SMSTaskSequence\TSEnv.dat. 0x80070005.    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) RemoveDirectoryW failed (0x80070091) for D:\_SMSTaskSequence  
     TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Deleting volume ID file C:\_SMSTSVolumeID.7159644d-f741-45d5-ab29-0ad8aa4771ca ...    TSManager    11/18/2014 1:07:43 PM    872
    (0x0368) DeleteFileW(sVolumeIDFile.c_str()), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\resolvesource.cpp,508)    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Deleting volume ID file D:\_SMSTSVolumeID.7159644d-f741-45d5-ab29-0ad8aa4771ca
    ...    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) DeleteFileW(sVolumeIDFile.c_str()), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\resolvesource.cpp,508)    TSManager    11/18/2014
    1:07:43 PM    872 (0x0368) Successfully unregistered Task Sequencing Environment COM Interface.    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Command line for extension .exe is "%1"
    %*    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Set command line: "X:\sms\bin\x64\TsProgressUI.exe" /Unregister    TSManager    11/18/2014 1:07:43 PM  
     872 (0x0368) Executing command line: "X:\sms\bin\x64\TsProgressUI.exe" /Unregister    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) ==========[ TsProgressUI started in process 1980 ]==========  
     TsProgressUI    11/18/2014 1:07:43 PM    624 (0x0270) Command line: "X:\sms\bin\x64\TsProgressUI.exe" /Unregister    TsProgressUI    11/18/2014 1:07:43 PM    624 (0x0270)
    Unregistering COM classes    TsProgressUI    11/18/2014 1:07:43 PM    624 (0x0270) Unregistering class objects    TsProgressUI    11/18/2014 1:07:43 PM    624 (0x0270)
    Shutdown complete.    TsProgressUI    11/18/2014 1:07:43 PM    624 (0x0270) Process completed with exit code 0    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Successfully
    unregistered TS Progress UI.    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) g_TSManager.Run(), HRESULT=80004005 (e:\nts_sccm_release\sms\client\tasksequence\tsmanager\tsmanager.cpp,766)    TSManager  
     11/18/2014 1:07:43 PM    872 (0x0368) ::RegQueryValueExW(hSubKey, szReg, NULL, NULL, NULL, &dwSize), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\utils.cpp,811)    TSManager    11/18/2014 1:07:43
    PM    872 (0x0368) RegQueryValueExW is unsuccessful for Software\Microsoft\SMS\Task Sequence, SMSTSEndProgram    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) GetTsRegValue() is unsuccessful.
    0x80070002.    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) End program:     TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Error Task Sequence Manager failed
    to execute task sequence. Code 0x80004005    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Sending error status message    TSManager    11/18/2014 1:07:43 PM    872
    (0x0368) MP server http://XXXXXSCCM12.XXXXX.XXXXX. Ports 80,443. CRL=false.    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Setting authenticator    TSManager    11/18/2014 1:07:43
    PM    872 (0x0368) Set authenticator in transport    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Sending StatusMessage    TSManager    11/18/2014 1:07:43 PM  
     872 (0x0368) Setting message signatures.    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Setting the authenticator.    TSManager    11/18/2014 1:07:43 PM    872
    (0x0368) CLibSMSMessageWinHttpTransport::Send: URL: XXXXXSCCM12.XXXXX.XXXXX:80  CCM_POST /ccm_system/request    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Request was successful.    TSManager  
     11/18/2014 1:07:43 PM    872 (0x0368) Finalize logging request ignored from process 804    TSManager    11/18/2014 1:07:43 PM    872 (0x0368) Process completed with exit code 2147500037  
     TSPxe    11/18/2014 1:07:43 PM    864 (0x0360) Task Sequence Manager returned code 0x80004005    TSPxe    11/18/2014 1:07:43 PM    864 (0x0360) ThreadToResolveAndExecuteTaskSequence
    returned code 0x00000000    TSPxe    11/18/2014 1:07:43 PM    844 (0x034C) ResolveProgressPage::OnWizardNext()    TSPxe    11/18/2014 1:07:43 PM    844 (0x034C) Activating
    Finish Page.    TSPxe    11/18/2014 1:07:43 PM    844 (0x034C) Exiting with return code 0x00000000    TSPxe    11/18/2014 1:07:43 PM    844 (0x034C) Execution complete.  
     TSBootShell    11/18/2014 1:07:43 PM    768 (0x0300) hMap != 0, HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\environmentscope.cpp,493)    TSBootShell    11/18/2014 1:07:43 PM  
     768 (0x0300) m_pGlobalScope->open(), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\environmentlib.cpp,335)    TSBootShell    11/18/2014 1:07:43 PM    768 (0x0300) this->open(), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\environmentlib.cpp,553)  
     TSBootShell    11/18/2014 1:07:43 PM    768 (0x0300) ::RegQueryValueExW(hSubKey, szReg, NULL, NULL, NULL, &dwSize), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\utils.cpp,811)    TSBootShell  
     11/18/2014 1:07:43 PM    768 (0x0300) RegQueryValueExW is unsuccessful for Software\Microsoft\SMS\Task Sequence, SMSTSEndProgram    TSBootShell    11/18/2014 1:07:43 PM    768 (0x0300) GetTsRegValue()
    is unsuccessful. 0x80070002.    TSBootShell    11/18/2014 1:07:43 PM    768 (0x0300) End program:     TSBootShell    11/18/2014 1:07:43 PM    768 (0x0300) Finalizing
    logging from process 760    TSBootShell    11/18/2014 1:07:43 PM    768 (0x0300) Finalizing logs to root of first available drive    TSBootShell    11/18/2014 1:07:43 PM  
     768 (0x0300) Successfully finalized logs to D:\SMSTSLog    TSBootShell    11/18/2014 1:07:43 PM    768 (0x0300) Cleaning up task sequencing logging configuration.    TSBootShell  
     11/18/2014 1:07:43 PM    768 (0x0300)

    Thank you for the reply, you're right the problem is with an image being applied, but not the OS image.
    The issue is that for some reason, there were 2 images captured and SCCM automatically created a step for both. Image 2-2 is the valid Windows image, but image 1-1 clearly has some issues. I disabled the that step in the Task Sequence and it installed drivers
    and completed the rest of the Task Sequence!

  • Old domain was removed and Unable to login as domain administrator account in windows 7 laptop

    I have a problem with a laptop which is in old domain, due to some issue I need to uninstall some of the programs on that machine for
    that it is asking administrator password, so when I was entering old domain’s administrator account password it is not logging in, and there is no other local administrator account configured on that machine, how to log in into that machine and join that to
    the new domain.
    I am trying to log in as <domain-name>\administrator 

    Hi,
    Logon to a domain with domain account is an interactive process, which needs cooperation of both DC and DNS. Since the old domain is delete, then, log in as <domain-name>\administrator to the old domain will failed.
    Open CMD, type “net user”, and press Enter to display user account of this computer. Check to see if any account which has administrator permission you can remember.
    Besides, type “net user administrator”, if the Account Active is YES, try to use this built-in administrator account to logon:
    Press Alt + Ctrl + Delete, select Switch User -> Other User, type <computer name>\administrator. (there may be no password if you haven’t set this)
    If there is no administrator permission account which you can use to logon, reinstall the system should be needed.
    Best Regards,           
    Eve Wang                                                                                                                                                  

  • Disable built in adminstrator account

    help

    Hi alboy44,
    Yes, like Ed said, Windows 7 the built-in Administrator's account is disabled by default.
    About how to enable and disable it, you could read the following professional guide:
    Enable / Disable the Local (Hidden, Built-In) Administrator Account in Windows 7
    http://social.technet.microsoft.com/wiki/contents/articles/3040.enable-disable-the-local-hidden-built-in-administrator-account-in-windows-7.aspx
    Karen Hu
    TechNet Community Support

  • Regarding Built in Admiin account

    I have tried all ways given in the forum of activating the built in admin account but I have failed to locate it on my laptop. I just want to know what is the purpose of the built in admin, why is it hidden and why cant a normal user use it.

    Hi,
    Apologize for the late reply.
    The built-in administrator is hidden by default, this account is basically a setup and disaster recovery account. And
    Jesper Johansson has a good article for the built-in administrator account. See:
    Why You Should Disable the Administrator Account.
    Besides, for the ways about how to enable the built-in administrator in Windows:
    Enable / Disable the Local (Hidden, Built-In) Administrator Account in Windows 7(the methods mentioned
    also work in Windows 8/8.1)
    If any further question, please feel free to ask.
    Best regards
    Michael Shao
    TechNet Community Support

  • Cannot Access the Administrator Account

    We have Windows 7 pro machines on a Server 2008 domain. I can't logon to a machine because the trust relationship with the domain has been lost. I have tried to remove the machine from the domain and then add it back, but the local administrators account
    is disabled. None of the local accounts on the machine have administrative rights so I'm unable to do this as it says access is denied. I've tried all the various fixes, ie run mmc and enable administrators account, boot into safe mode etc but none work. Is
    there a way to resolve this without reloading the machine with W7?

    Hi,
    Please refer to following guide to enable built-in administrator account in WinRE. You need a installation media to start Windows into WinRE:
    Windows 7: Built-in Administrator - Enable from WinRE
    http://techlogon.com/2011/12/06/how-to-enable-the-hidden-admin-account-in-windows-7/
    Then try to exit the domain.
    Kate Li
    TechNet Community Support

  • Administrator Account Usage Question

    So I have been under the impression for quite some time that the Administrator account is different than accounts in the Administrators group, other than just always having the full access token- specifically, that a corrupted or misused Administrator account
    can damage the system more than the same corruption/misuse of an account in the Admin group.
    Is there anything within the Windows security architecture itself which relies on the Administrator account?
    My organization enables the Administrator account on all our machines, rather than creating an account within the Admin group for troubleshooting.
    Is there any reason we should not be doing this (apart from the obvious, "minimize people with admin access")?
    Thank you,
    Eric

    Hi,
    Here are some threads below discussed about differences between built-in administrators and other user accounts under administrator group:
    built-in administrator account vs. administrator group?
    http://social.technet.microsoft.com/Forums/windows/en-US/a151ecdd-675d-4116-8760-01edad3d9eea/builtin-administrator-account-vs-administrator-group?forum=w7itprosecurity
    someone help me what is difference between administrator (built in group) & user administrator
    http://social.technet.microsoft.com/Forums/en-US/22282098-af6d-4f02-a5c5-10ef45dc5619/someone-help-me-what-is-difference-between-administrator-built-in-group-user-administrator?forum=winservergen
    Best Regards,
    Amy Wang

Maybe you are looking for