Built-in administrator account
Dear All,
I was searching for the best way to secure the Built-in Administrator account on Active Directory and found the below two options suggested from Mircosoft. I would appreciate your help in recommending the best option:
1. rename account
http://technet.microsoft.com/en-us/library/cc700835.aspx
2. disable its access
http://technet.microsoft.com/en-us/library/dn535492.aspx
Regards,
Elham
Hiam
Hi,
I would say renaming the account and generate a strong password would be a good choice.
Rehards,
Calin
Similar Messages
-
After enabling the Built-in Administrator account, it is not shown on Welcome screen
Hello,
I have Windows 7 Starter SP1.
I have previously successfully enabled and then logged on, to the built-in administrator account, and then when I had finished using it, disabled it again.
Unfortunately today, I found that when I enabled the built-in administrator account, it no longer appears on the Welcome screen.
I went through the process of enabling it by doing:
Start/Search "CMD"/right-click CMD/Run as administrator.
net user administrator active:yes
It confirms: "The command completed successfully."
However, when I log off and log back on (or do shut down and restart), the Welcome screen does not display any option for the Built-in Administrator account.
I have also tried doing the above in Safe mode, and also using Command Prompt from a Rescue disk.
As background information:
The reason why I wanted to access this account today, was because I attempted to defrag a partition listed as "(1% fragmented)" and after Defrag appeared to complete while at "Pass 2", the partition is still shown as 1% fragmented.
I would appreciate advice how to resolve the issue with the built-in administrator account.
Regards,
Robert339Hello Niki Han,
Thank you for your response. I have not yet had an opportunity to look into what you have written but wish to thank you for that information.
Meanwhile, I would like to discuss the possible cause for this issue. I know the date when I last successfully accessed the built-in Administrator account, which was April 18, 2012.
Since I was last able to use that account on April 18, 2012, I have made no changes to the system other than install all Important Microsoft Updates through Windows Update.
A full scan with Windows Defender finds no threats.
A full scan with Avast finds no threats.
I beleive Microsoft may wish to ensure that this issue has not been caused by any of the following 30 updates. If it has been caused by one of these updates, then Microsoft should consider issuing a further update to correct this.
- - - Extract from Windows Update History for period April 18, 2012 and the date I noticed this issue of May 18, 2012, Starts: - - - -
Definition Update for Windows Defender - KB915597 (Definition 1.125.1635.0)
Installation date: 13/05/2012 19:31
Security Update for Microsoft Silverlight (KB2636927)
Installation date: 10/05/2012 15:44
Windows Malicious Software Removal Tool - May 2012 (KB890830)
Installation date: 09/05/2012 22:51
Update Rollup for ActiveX Killbits for Windows 7 (KB2695962)
Installation date: 09/05/2012 22:45
Definition Update for Windows Defender - KB915597 (Definition 1.125.1373.0)
Installation date: 09/05/2012 22:45
Security Update for Microsoft Silverlight (KB2690729)
Installation date: 09/05/2012 22:45
Security Update for Microsoft Office 2007 suites (KB2596880)
Installation date: 09/05/2012 22:33
Security Update for Microsoft Office Excel 2007 (KB2597161)
Installation date: 09/05/2012 22:32
Security Update for Microsoft Office Word 2007 (KB2596917)
Installation date: 09/05/2012 22:31
Security Update for Microsoft Office 2007 suites (KB2596672)
Installation date: 09/05/2012 22:31
Security Update for Microsoft Office 2007 suites (KB2597969)
Installation date: 09/05/2012 22:29
Security Update for Microsoft Office 2007 suites (KB2597162)
Installation date: 09/05/2012 22:28
Security Update for Microsoft Office 2007 suites (KB2596792)
Installation date: 09/05/2012 22:27
Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 SP1 x86 (KB2604115)
Installation date: 09/05/2012 22:16
Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2656405)
Installation date: 09/05/2012 22:16
Security Update for Windows 7 (KB2688338)
Installation date: 09/05/2012 22:12
Security Update for Windows 7 (KB2660649)
Installation date: 09/05/2012 22:12
Security Update for Windows 7 (KB2659262)
Installation date: 09/05/2012 22:11
Security Update for Windows 7 (KB2676562)
Installation date: 09/05/2012 22:11
Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 SP1 x86 (KB2656411)
Installation date: 09/05/2012 22:11
Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2604121)
Installation date: 09/05/2012 22:11
Security Update for Windows 7 (KB2690533)
Installation date: 09/05/2012 22:04
Security Update for Windows 7 (KB2658846)
Installation date: 09/05/2012 22:04
Definition Update for Windows Defender - KB915597 (Definition 1.125.1137.0)
Installation date: 06/05/2012 14:54
Definition Update for Windows Defender - KB915597 (Definition 1.125.1090.0)
Installation date: 03/05/2012 23:48
Definition Update for Windows Defender - KB915597 (Definition 1.125.886.0)
Installation date: 02/05/2012 15:09
Definition Update for Windows Defender - KB915597 (Definition 1.125.655.0)
Installation date: 28/04/2012 23:55
Definition Update for Windows Defender - KB915597 (Definition 1.125.402.0)
Installation date: 25/04/2012 01:08
Definition Update for Windows Defender - KB915597 (Definition 1.125.146.0)
Installation date: 20/04/2012 16:10
Definition Update for Windows Defender - KB915597 (Definition 1.123.1936.0)
Installation date: 18/04/2012 15:55
- - - - End of Extract from Windows Update History - - - - -
Factory set password for Windows Vista built-in administrator account?
I am attempting access the Vista built-in administrator account, which normally is not passworded unless the user does so. Mine, however, has a password that was set 11/20/2010 at 9:57:24 PM.
Was this p/w set by Toshiba? I assume so, as it was purchased directly from Toshiba. If so, any idea what that p/w would be? I need to use this account to recover my own admin account due to this error: The User Profile Service failed the logon. User profile cannot be loaded.
Machine is a Satellite P300 S/N 29020124W, Part # PSPC8U-01G00Q.
Thanks.Satellite P300-ST3712
You receive a "The User Profile Service failed the logon” error message
How to Fix the Error "Your user profile was not loaded correctly! You have been logged on with a tem...
Was this p/w set by Toshiba?
No. But some programs like the Google Updater (if you added the Google Toolbar, Chrome or Google Earth) have been known to cause this problem.
-Jerry -
Not Able to Promote DC to server even i am using built in Administrator Account.
hi,
i am facing below mentioned issue from last 4 to 5 days and i am very frustrating about this error and nobody give me a proper solution. if any anybody facing this kind of issue please give me a solution this will very helpful for me.
"Windows Server 2012 domain controllers have a default for the security setting named "Allow cryptography algorithms compatible with Windows NT 4.0" that prevents weaker cryptography algorithms when establishing security channel sessions."
Thanks & Regards,
Sushant Chavan.Hi Sushant,
>>Not Able to Promote DC to server even i am using built in Administrator Account.
I have seen your thread "Verification of prerequisites for Domain Controller promotion failed" and provided a reply.
Verification of prerequisites for Domain Controller promotion failed
http://social.technet.microsoft.com/Forums/en-US/23f33ffa-a847-47bc-81d4-569f8e195886/verification-of-prerequisites-for-domain-controller-promotion-failed?forum=winserver8gen
In the reply, it provides a step-to-step guidance for setting up a Windows Server 2012 Domain Controller. Have we followed it to promote the server?
Best regards,
Frank Shen -
Enabling Windows Server 2008 R2 Built-In Administrator Account
The properties box for my Windows Server 2008 R2 built-in administrator program says the account is disabled. Even the primary user account has virtually no priveliges. How can I, with a mere primary user account available at logon, enable
the built-in administrator account, or otherwise grant my primary user account administrator priveliges? Windows Server 2008 R2 denies my primary user account access/permission for nearly all changes to accounts, programs and OS features.
Stephen W PlunkettThe properties box for my Windows Server 2008 R2 built-in administrator program says the account is disabled. Even the primary user account has virtually no priveliges. How can I, with a mere primary user account available at logon,
enable the built-in administrator account, or otherwise grant my primary user account administrator priveliges? Windows Server 2008 R2 denies my primary user account access/permission for nearly all changes to accounts, programs and OS features.
Stephen W Plunkett
In some of the organisations, default admin accounts on member servers are purposefully locked/disabled through group policy for security reasons.
If you know the password for locked out/disabled admin account then there is a possibility of unlocking/re-enabling the account without using any third party tools.
To do that,
Restart the server
Press F8 and select Safe Mode Without
Networking
Log on to the server with locked out/disabled admin account with its password.
If you could successfully log on to the server then you will have option to unlock and enable the built-in admin account !
Most of the downtime's are caused because of SysAdmin's curiosity ! - Santosh -
Unable to enroll fingerprints for the Win7 built-in Administrator account
In Windows 7 I tried to enroll fingerprints for the built-in Administrator account, but doing so failed every time with the error message The enrollment could not be completed.
I could not find a solution online and the Validity software was working just fine, as there were no issues with other users on the same system. As a work-around, I created another account with administrator privileges and enrolling the fingerprints worked just fine. My guess is that the permissions for the built-in Administrator account are different from any administrator account you can create yourself. What I noticed is that any self created account is part of the Users group, and that the built-in Administrator account is not part of this group. I'm not sure, but maybe this is the cause of the problem.
Anyway, I thought I would share my experience here, in case anyone else encounters the same problem.same issue in build 10049.
It would help to be more specific in the symptom description. E.g. using Narrator may help. (Win-Enter). Does it say what you are "seeing" (or should be seeing)?
FWIW I think it is relatively easy to reproduce symptoms which are related to this thread's description using Narrator (Start Screen without Search bar, Search bar without Taskbar, or Search bar with Taskbar but without Start Menu
when the only time that the Search bar should appear is when the Start Menu is there, for example) so that could also help specify what your real symptom is. BTW there are horrendous delays when using Narrator.
Robert Aldwinckle -
As per title....
The JA KB (when translated) states,
If you use the built-in Administrator in Internet Explorer 11, when you open a new window named, such as window.open method, window name is not recognized.
Therefore, the following phenomenon will occur.
If you specify in the window.open method of the window named, rather than a window that is already open, URL is displayed in a new tab or new window
If you specify in the target attribute of the link or form window named, not the window that is already open, URL is displayed in a new tab or new window
What's Microsoft's comments on tracking to a resolution of this ?luca wrote:
Hi krazyshane,
try to add this directive in Section "Device":
Option "DRI" "true"
This got it! Thanks!
Shane -
Windows 10 Built-in Administrator account?
Well, that's a drag! So a domain administrator cannot use native apps?
I also don't understand why the OS is reporting the user as "Built-in administrator" as that is not the case.I upgraded a Lenovo T530 from Windows 7 to Windows 10. It is joined to our domain and I am logged in as domain\administrator. Most everything works except many (all?) of the native Windows apps, Edge and calendar for example. When I try to open the app I see this:
This topic first appeared in the Spiceworks Community -
Msiexec /qn fails when its not run using the built-in local administrator account
Hello all,
I am working on a project where I am trying to automate the deployment of VMs through a self-service portal.
Among other tasks such as clone VM, sysprep it, assign an IP, create AD computer object, join VM to domain and so on..., i need to install a few applications using msiexec, which is driving me crazy...
For this purpose, I am using a local user account part of the administrators group.
Please note, UAC is disabled on all the OS.
Basically, the msi installation works as expected on Windows 7 machines, however on Windows 8/2012, it fails due to lack of permissions. The curious thing is that if I use the built-in\administrator account instead for the deployment on those systems, the
application is installed correctly.
I have tested some things such as: DisableMSI (http://msdn.microsoft.com/en-us/library/aa368304%28v=vs.85%29.aspx), but although it progresses a bit further, it keeps failing.
Does anyone know what I can do to allow an user part of the administrators local group to be able to install using msiexec /qn?
Thanks in advance.Hi,
Does it work if you use the account in local admin, and run the commands prompt as administrator to install the msi file? Please know that Only the built in administrator account has admin privilege by default. On other admin accounts you need
to run with elevated privilege (ie runas).
I would like to know if you use SCCM to perform your deployment with task sequence.
As I known, even if you disable UAC, the following policy is still enabled to detect application installation.
Computer configuration\Windows settings\Security Settings\Local
Policies\Security Options -> User Account Control: Detect application installations and prompt for elevation policy
Please disable this policy to see if your issue can be fixed.
Kate Li
TechNet Community Support -
SCCM 2012 R2 CU3 - Drivers Not Installing, Local Administrator Account Disabled
After PXE OSD for a Thick Image of Win 7 x64 Ent completes, several Task Sequence steps are not complete. Namely, 3 device drivers are missing (NIC, SM Bus and some other chipset driver), the built-in Administrator Account is disabled and it's not Domain
joined.
I have already re-created the thick WIM twice. It was built in a VMware VM then captured with SCCM Capture Media. The NIC is a Realtek and I have downloaded the most recent version of the drivers from HP's site and added them to a driver package which is
deployed. I even added several older drivers to my Boot Image and created to 2 steps to add drivers in the Task Sequence - one automatically installs the best drivers, the other installs a package with 7 NIC drivers. When I get the error during PXE OSD, I
press F8 and the machine has an IP address and the driver for the NIC appears to be correct. Upon rebooting, Windows completes setup but the Administrator Account is not enabled and the NIC driver is missing, etc.
Here is the portion of the log where errors begin to show up (from D:\SMSTSLog). Any help is GREATLY appreciated!!
!--------------------------------------------------------------------------------------------! TSManager 11/18/2014 1:06:57 PM 872 (0x0368) Expand a string: WinPE TSManager
11/18/2014 1:06:58 PM 872 (0x0368) Executing command line: OSDApplyOS.exe /data:XXXXX0001A,%OSDDataImageIndex% TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Command line for extension
.exe is "%1" %* ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) Set command line: "OSDApplyOS.exe" /data:XXXXX0001A,1 ApplyOperatingSystem 11/18/2014
1:06:58 PM 1040 (0x0410) Searching for next available volume: ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) Volume C:\ has already used. ApplyOperatingSystem
11/18/2014 1:06:58 PM 1040 (0x0410) Volume D:\ has already used. ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) Volume E:\ is not a XXXXX hard drive.
ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) Volume X:\ is not a XXXXX hard drive. ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) it
!= volumes.end(), HRESULT=80004005 (e:\nts_sccm_release\sms\client\osdeployment\applyos\installcommon.cpp,519) ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) There are no more volumes available
for use. ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) GetNextAvailableVolume(allowFAT, volume), HRESULT=80004005 (e:\nts_sccm_release\sms\client\osdeployment\applyos\installcommon.cpp,651)
ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) The requested target could not be resolved to a valid volume on this computer. Check your task sequence to ensure this drive is correct and that it is being
created The parameter is incorrect. (Error: 80070057; Source: Windows) ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) ResolveTarget( g_Target, g_InstallType == InstallType_DataImage, targetVolume
), HRESULT=80004005 (e:\nts_sccm_release\sms\client\osdeployment\applyos\applyos.cpp,483) ApplyOperatingSystem 11/18/2014 1:06:58 PM 1040 (0x0410) Process completed with exit code 2147500037
TSManager 11/18/2014 1:06:58 PM 872 (0x0368) !--------------------------------------------------------------------------------------------! TSManager 11/18/2014 1:06:58 PM
872 (0x0368) Failed to run the action: Apply Data Image 1. Unspecified error (Error: 80004005; Source: Windows) TSManager 11/18/2014 1:06:58 PM 872 (0x0368) MP server http://XXXXSCCM12.XXXXX.XXXXX.
Ports 80,443. CRL=false. TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Setting authenticator TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Set authenticator
in transport TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Sending StatusMessage TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Setting message signatures.
TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Setting the authenticator. TSManager 11/18/2014 1:06:58 PM 872 (0x0368) CLibSMSMessageWinHttpTransport::Send: URL:
XXXXXSCCM12.XXXXX.XXXXX:80 CCM_POST /ccm_system/request TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Request was successful. TSManager 11/18/2014 1:06:58 PM
872 (0x0368) Set a global environment variable _SMSTSLastActionRetCode=-2147467259 TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Set a global environment variable _SMSTSLastActionSucceeded=false
TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Clear XXXXX default environment TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Let the parent group (Install Operating
System) decides whether to continue execution TSManager 11/18/2014 1:06:58 PM 872 (0x0368) The execution of the group (Install Operating System) has failed and the execution has been aborted. An action
failed. Operation aborted (Error: 80004004; Source: Windows) TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Failed to run the last action: Apply Data Image 1. Execution of task sequence failed. Unspecified
error (Error: 80004005; Source: Windows) TSManager 11/18/2014 1:06:58 PM 872 (0x0368) MP server http://XXXXXSCCM12.XXXXX.XXXXX. Ports 80,443. CRL=false. TSManager 11/18/2014
1:06:58 PM 872 (0x0368) Setting authenticator TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Set authenticator in transport TSManager 11/18/2014 1:06:58
PM 872 (0x0368) Sending StatusMessage TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Setting message signatures. TSManager 11/18/2014 1:06:58 PM
872 (0x0368) Setting the authenticator. TSManager 11/18/2014 1:06:58 PM 872 (0x0368) CLibSMSMessageWinHttpTransport::Send: URL: XXXXXSCCM12.XXXXX.XXXXX:80 CCM_POST /ccm_system/request
TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Request was successful. TSManager 11/18/2014 1:06:58 PM 872 (0x0368) Executing command line: X:\WINDOWS\system32\cmd.exe
/k TSBootShell 11/18/2014 1:07:38 PM 764 (0x02FC) The command completed successfully. TSBootShell 11/18/2014 1:07:38 PM 764 (0x02FC) Successfully launched
command shell. TSBootShell 11/18/2014 1:07:38 PM 764 (0x02FC) Execution::enExecutionFail != m_eExecutionResult, HRESULT=80004005 (e:\nts_sccm_release\sms\client\tasksequence\tsmanager\tsmanager.cpp,923)
TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Task Sequence Engine failed! Code: enExecutionFail TSManager 11/18/2014 1:07:43 PM 872 (0x0368) ****************************************************************************
TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Task sequence execution failed with error code 80004005 TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Cleaning Up.
TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Removing Authenticator TSManager 11/18/2014 1:07:43 PM 872 (0x0368) shKey.DeleteValue( c_szRegValue_SecurityToken ),
HRESULT=80070002 (e:\nts_sccm_release\sms\framework\ccmutillib\ccmutillib.cpp,1660) TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Cleaning up task sequence folder TSManager
11/18/2014 1:07:43 PM 872 (0x0368) Unable to delete file D:\_SMSTaskSequence\TSEnv.dat (0x80070005). Continuing. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) hr, HRESULT=80070091
(e:\nts_sccm_release\sms\framework\core\ccmcore\ccmfile.cpp,1218) TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Failed to delete directory 'D:\_SMSTaskSequence' TSManager 11/18/2014
1:07:43 PM 872 (0x0368) (dwRet = ::SetNamedSecurityInfoW ((WCHAR*) pszObjectName, objectType, OWNER_SECURITY_INFORMATION, pOwnerSID, NULL, NULL, NULL)) == ERROR_SUCCESS, HRESULT=80070005 (e:\qfe\nts\sms\framework\tscore\utils.cpp,6675)
TSManager 11/18/2014 1:07:43 PM 872 (0x0368) SetNamedSecurityInfo() failed. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) SetObjectOwner() failed. 0x80070005.
TSManager 11/18/2014 1:07:43 PM 872 (0x0368) SetObjectOwner (szFName, SE_FILE_OBJECT, c_szAdministrators), HRESULT=80070005 (e:\qfe\nts\sms\framework\tscore\utils.cpp,6772) TSManager 11/18/2014
1:07:43 PM 872 (0x0368) RemoveFile() failed for D:\_SMSTaskSequence\TSEnv.dat. 0x80070005. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) RemoveDirectoryW failed (0x80070091) for D:\_SMSTaskSequence
TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Deleting volume ID file C:\_SMSTSVolumeID.7159644d-f741-45d5-ab29-0ad8aa4771ca ... TSManager 11/18/2014 1:07:43 PM 872
(0x0368) DeleteFileW(sVolumeIDFile.c_str()), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\resolvesource.cpp,508) TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Deleting volume ID file D:\_SMSTSVolumeID.7159644d-f741-45d5-ab29-0ad8aa4771ca
... TSManager 11/18/2014 1:07:43 PM 872 (0x0368) DeleteFileW(sVolumeIDFile.c_str()), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\resolvesource.cpp,508) TSManager 11/18/2014
1:07:43 PM 872 (0x0368) Successfully unregistered Task Sequencing Environment COM Interface. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Command line for extension .exe is "%1"
%* TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Set command line: "X:\sms\bin\x64\TsProgressUI.exe" /Unregister TSManager 11/18/2014 1:07:43 PM
872 (0x0368) Executing command line: "X:\sms\bin\x64\TsProgressUI.exe" /Unregister TSManager 11/18/2014 1:07:43 PM 872 (0x0368) ==========[ TsProgressUI started in process 1980 ]==========
TsProgressUI 11/18/2014 1:07:43 PM 624 (0x0270) Command line: "X:\sms\bin\x64\TsProgressUI.exe" /Unregister TsProgressUI 11/18/2014 1:07:43 PM 624 (0x0270)
Unregistering COM classes TsProgressUI 11/18/2014 1:07:43 PM 624 (0x0270) Unregistering class objects TsProgressUI 11/18/2014 1:07:43 PM 624 (0x0270)
Shutdown complete. TsProgressUI 11/18/2014 1:07:43 PM 624 (0x0270) Process completed with exit code 0 TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Successfully
unregistered TS Progress UI. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) g_TSManager.Run(), HRESULT=80004005 (e:\nts_sccm_release\sms\client\tasksequence\tsmanager\tsmanager.cpp,766) TSManager
11/18/2014 1:07:43 PM 872 (0x0368) ::RegQueryValueExW(hSubKey, szReg, NULL, NULL, NULL, &dwSize), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\utils.cpp,811) TSManager 11/18/2014 1:07:43
PM 872 (0x0368) RegQueryValueExW is unsuccessful for Software\Microsoft\SMS\Task Sequence, SMSTSEndProgram TSManager 11/18/2014 1:07:43 PM 872 (0x0368) GetTsRegValue() is unsuccessful.
0x80070002. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) End program: TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Error Task Sequence Manager failed
to execute task sequence. Code 0x80004005 TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Sending error status message TSManager 11/18/2014 1:07:43 PM 872
(0x0368) MP server http://XXXXXSCCM12.XXXXX.XXXXX. Ports 80,443. CRL=false. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Setting authenticator TSManager 11/18/2014 1:07:43
PM 872 (0x0368) Set authenticator in transport TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Sending StatusMessage TSManager 11/18/2014 1:07:43 PM
872 (0x0368) Setting message signatures. TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Setting the authenticator. TSManager 11/18/2014 1:07:43 PM 872
(0x0368) CLibSMSMessageWinHttpTransport::Send: URL: XXXXXSCCM12.XXXXX.XXXXX:80 CCM_POST /ccm_system/request TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Request was successful. TSManager
11/18/2014 1:07:43 PM 872 (0x0368) Finalize logging request ignored from process 804 TSManager 11/18/2014 1:07:43 PM 872 (0x0368) Process completed with exit code 2147500037
TSPxe 11/18/2014 1:07:43 PM 864 (0x0360) Task Sequence Manager returned code 0x80004005 TSPxe 11/18/2014 1:07:43 PM 864 (0x0360) ThreadToResolveAndExecuteTaskSequence
returned code 0x00000000 TSPxe 11/18/2014 1:07:43 PM 844 (0x034C) ResolveProgressPage::OnWizardNext() TSPxe 11/18/2014 1:07:43 PM 844 (0x034C) Activating
Finish Page. TSPxe 11/18/2014 1:07:43 PM 844 (0x034C) Exiting with return code 0x00000000 TSPxe 11/18/2014 1:07:43 PM 844 (0x034C) Execution complete.
TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) hMap != 0, HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\environmentscope.cpp,493) TSBootShell 11/18/2014 1:07:43 PM
768 (0x0300) m_pGlobalScope->open(), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\environmentlib.cpp,335) TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) this->open(), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\environmentlib.cpp,553)
TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) ::RegQueryValueExW(hSubKey, szReg, NULL, NULL, NULL, &dwSize), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\utils.cpp,811) TSBootShell
11/18/2014 1:07:43 PM 768 (0x0300) RegQueryValueExW is unsuccessful for Software\Microsoft\SMS\Task Sequence, SMSTSEndProgram TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) GetTsRegValue()
is unsuccessful. 0x80070002. TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) End program: TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) Finalizing
logging from process 760 TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) Finalizing logs to root of first available drive TSBootShell 11/18/2014 1:07:43 PM
768 (0x0300) Successfully finalized logs to D:\SMSTSLog TSBootShell 11/18/2014 1:07:43 PM 768 (0x0300) Cleaning up task sequencing logging configuration. TSBootShell
11/18/2014 1:07:43 PM 768 (0x0300)Thank you for the reply, you're right the problem is with an image being applied, but not the OS image.
The issue is that for some reason, there were 2 images captured and SCCM automatically created a step for both. Image 2-2 is the valid Windows image, but image 1-1 clearly has some issues. I disabled the that step in the Task Sequence and it installed drivers
and completed the rest of the Task Sequence! -
Old domain was removed and Unable to login as domain administrator account in windows 7 laptop
I have a problem with a laptop which is in old domain, due to some issue I need to uninstall some of the programs on that machine for
that it is asking administrator password, so when I was entering old domain’s administrator account password it is not logging in, and there is no other local administrator account configured on that machine, how to log in into that machine and join that to
the new domain.
I am trying to log in as <domain-name>\administratorHi,
Logon to a domain with domain account is an interactive process, which needs cooperation of both DC and DNS. Since the old domain is delete, then, log in as <domain-name>\administrator to the old domain will failed.
Open CMD, type “net user”, and press Enter to display user account of this computer. Check to see if any account which has administrator permission you can remember.
Besides, type “net user administrator”, if the Account Active is YES, try to use this built-in administrator account to logon:
Press Alt + Ctrl + Delete, select Switch User -> Other User, type <computer name>\administrator. (there may be no password if you haven’t set this)
If there is no administrator permission account which you can use to logon, reinstall the system should be needed.
Best Regards,
Eve Wang -
Disable built in adminstrator account
help
Hi alboy44,
Yes, like Ed said, Windows 7 the built-in Administrator's account is disabled by default.
About how to enable and disable it, you could read the following professional guide:
Enable / Disable the Local (Hidden, Built-In) Administrator Account in Windows 7
http://social.technet.microsoft.com/wiki/contents/articles/3040.enable-disable-the-local-hidden-built-in-administrator-account-in-windows-7.aspx
Karen Hu
TechNet Community Support -
Regarding Built in Admiin account
I have tried all ways given in the forum of activating the built in admin account but I have failed to locate it on my laptop. I just want to know what is the purpose of the built in admin, why is it hidden and why cant a normal user use it.
Hi,
Apologize for the late reply.
The built-in administrator is hidden by default, this account is basically a setup and disaster recovery account. And
Jesper Johansson has a good article for the built-in administrator account. See:
Why You Should Disable the Administrator Account.
Besides, for the ways about how to enable the built-in administrator in Windows:
Enable / Disable the Local (Hidden, Built-In) Administrator Account in Windows 7(the methods mentioned
also work in Windows 8/8.1)
If any further question, please feel free to ask.
Best regards
Michael Shao
TechNet Community Support -
Cannot Access the Administrator Account
We have Windows 7 pro machines on a Server 2008 domain. I can't logon to a machine because the trust relationship with the domain has been lost. I have tried to remove the machine from the domain and then add it back, but the local administrators account
is disabled. None of the local accounts on the machine have administrative rights so I'm unable to do this as it says access is denied. I've tried all the various fixes, ie run mmc and enable administrators account, boot into safe mode etc but none work. Is
there a way to resolve this without reloading the machine with W7?Hi,
Please refer to following guide to enable built-in administrator account in WinRE. You need a installation media to start Windows into WinRE:
Windows 7: Built-in Administrator - Enable from WinRE
http://techlogon.com/2011/12/06/how-to-enable-the-hidden-admin-account-in-windows-7/
Then try to exit the domain.
Kate Li
TechNet Community Support -
Administrator Account Usage Question
So I have been under the impression for quite some time that the Administrator account is different than accounts in the Administrators group, other than just always having the full access token- specifically, that a corrupted or misused Administrator account
can damage the system more than the same corruption/misuse of an account in the Admin group.
Is there anything within the Windows security architecture itself which relies on the Administrator account?
My organization enables the Administrator account on all our machines, rather than creating an account within the Admin group for troubleshooting.
Is there any reason we should not be doing this (apart from the obvious, "minimize people with admin access")?
Thank you,
EricHi,
Here are some threads below discussed about differences between built-in administrators and other user accounts under administrator group:
built-in administrator account vs. administrator group?
http://social.technet.microsoft.com/Forums/windows/en-US/a151ecdd-675d-4116-8760-01edad3d9eea/builtin-administrator-account-vs-administrator-group?forum=w7itprosecurity
someone help me what is difference between administrator (built in group) & user administrator
http://social.technet.microsoft.com/Forums/en-US/22282098-af6d-4f02-a5c5-10ef45dc5619/someone-help-me-what-is-difference-between-administrator-built-in-group-user-administrator?forum=winservergen
Best Regards,
Amy Wang
Maybe you are looking for
-
Have MacBook Pro (ancient) has 2.16 Ghz Intel Core Duo with 1 GB 667 MHz RAM using OS 10.4.11. Can I upgrade OS? If so, how far? And can I add more memory? I realize this is an old laptop but I need to wait to upgrade to new.
-
CONTROLLING THE VIEWING EXPERIENCE IN ACROBAT
CONTROLLING THE VIEWING EXPERIENCE IN ACROBAT This is a major bug (going back to at lease Acrobat 5) and just one of many related to the “Document Properties > Initial View” setting, which seem to be a “special project” for the Adobe Acrobat tech-tea
-
Hi, I have seen sometimes the queries which work in oracle sql*plus and Pl/Sql Developer,they dont work in Oracle forms, for example following query works in Pl/sql developer,but not in oracle forms select * from tablea where name in (variable) so if
-
Assignment Field is blank in the Accounting Document of MIRO
Hi Gurus I am working on ECC 6 version. I have observed in my system that for some of the vendor invoices posted using the MIRO transaction, assignment field is blank in the respective Accounting Document for the Vendor Line Item. But for GRIR Line I
-
Dear All, Actually we are using Macro for Uploading Data in oracle 11 i but Now my company have changed the version to Oracle R 12 the MAcro we are using in Send_rows macro developed by Below Mentioned People , Now i need something like this for R12