Enabling Windows Server 2008 R2 Built-In Administrator Account

The properties box for my Windows Server 2008 R2 built-in administrator program says the account is disabled.  Even the primary user account has virtually no priveliges.  How can I, with a mere primary user account available at logon, enable
the built-in administrator account, or otherwise grant my primary user account administrator priveliges?  Windows Server 2008 R2 denies my primary user account access/permission for nearly all changes to accounts, programs and OS features. 
Stephen W Plunkett

The properties box for my Windows Server 2008 R2 built-in administrator program says the account is disabled.  Even the primary user account has virtually no priveliges.  How can I, with a mere primary user account available at logon,
enable the built-in administrator account, or otherwise grant my primary user account administrator priveliges?  Windows Server 2008 R2 denies my primary user account access/permission for nearly all changes to accounts, programs and OS features. 
Stephen W Plunkett
In some of the organisations, default admin accounts on member servers are purposefully locked/disabled through group policy for security reasons.
If you know the password for locked out/disabled admin account then there is a possibility of unlocking/re-enabling the account without using any third party tools.
To do that,
Restart the server
Press F8 and select Safe Mode Without
Networking
Log on to the server with locked out/disabled admin account with its password.
If you could successfully log on to the server then you will have option to unlock and enable the built-in admin account !
Most of the downtime's are caused because of SysAdmin's curiosity ! - Santosh

Similar Messages

  • Windows Server 2008 - How to remotely manage account passwords?

    I'm hoping to get direction on how to remotely manage 'user accounts' on Windows Server 2008 machines.  The remote management would be from an automated perspective.  For example, I have a custom application (maybe C#, Java, etc) that runs on one
    server that makes connections to various 'Windows Server 2008' servers; and I want it to be able to do the following.
    Query Windows Server 2008 box for full list of user accounts
    Update password for user account
    Lock account
    Unlock account
    Check policy information to find out when password may expire
    I'm trying to find out what may already be available and running on Windows Server 2008 that I can take advantage to get this done programmatically.
    -Wes

    I agree with Mekac, the gallery should provide a lot of script of what you want to do.
    Like ;
    https://gallery.technet.microsoft.com/Password-Expiry-Email-177c3e27 - Password Expiry Email Notification.
    Regards, Philippe
    Don't forget to mark as answer or vote as helpful to help identify good information. ( linkedin endorsement never hurt too :o) )
    Answer an interesting question ? Create a
    wiki article about it!

  • Windows Server 2012 R2 cannot rename Administrator account via GPO

    Have created the normal Rename Administrator GPO: Comp config -> Policies -> Windows settings -> Security settings -> local policies -> Security options Accounts: Rename Administrator Account
    But GPO does not get applied for some reason, RSOP indicated the policy engine did not attempt to configure the setting.
    Any suggestions?

    Hi,
    Any update?
    Just checking in to see if the suggestions were helpful. Please let us know if you would like further assistance. If the issue persists, please provide the following information for further
    research.
    GPMC.log
    ==================
    a. On domain controller, click Start -> Run, type GPMC.MSC, it will load the GPMC console.
    b. Right click on "Group Policy Result" and choose wizard to generate a report for the problematic computer and user account (please place appropriately). (Choose computer and select the proper
    user in the wizard)
    c. Right click the resulting group policy result and click the "Save Report…" => save report to save the report to a HTML file.
    Best Regards,
    Andy Qi
    TechNet Subscriber Support
    If you are
    TechNet Subscription user and have any feedback on our support quality, please send your feedback
    here.
    Andy Qi
    TechNet Community Support

  • Problem installing Windows Server 2008 R2 Service Pack 1 Multilingual User Interface Language Packs

    I downloaded Windows6.1-KB2483139-x64-en-US.exe but when I ran it on my Windows Server 2008 R2 SP1 (as Administrator) it does not run properly.  I noticed it created a new cabinet file named "lp" briefly, then deleted it.  Nothing else
    appears on the screen.  
    My goal is to install Chinese display fonts on my server.  Please help.

    Hi,
    First of all, if you want Chinese display language, you need to choose chinese in the drop down list on the download page. Here's a direct link in case you need it.
    http://www.microsoft.com/en-us/download/details.aspx?id=2634(chinese simplified...)
    Windows6.1-KB2483139-x64-zh-CN.exe is the file name for the Chinese simplified language pack.
    1. The exefile extracts the file cabinet lp.cab which is the file you need to import the language pack.
    2. Start lpksetup.exe and Point out the cab-file you just extracted.
    If you want to do it with cmdline, you can do it with dism in an elevated command prompt as well:
    Dism /online /Add-Package /PackagePath:C:\test\lp.cab
    Note that you still need to create a policy or change default language in some way for your users.
    Read more on the topic on:
    http://technet.microsoft.com/en-us/library/dd744278(v=ws.10).aspx (adding)
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/7f019a90-8e48-4bc3-a9d2-e3c531354d04/how-to-use-group-policy-to-define-terminal-users-display-language-in-2008r2-terminal-servers (creating
    gpo)
    Microsoft Certified Trainer
    MCSE: Desktop, Server, Private Cloud, Messaging
    Blog: http://365lab.net

  • Programmatic webdav/unc access requires user logon to windows server 2008 R2

    I have an automated process (a .net windows service) that connects to sharepoint document library via a UNC (\\mysharepointsite\doclib).  When the machine is rebooted,
    accessing this folder results in a  System.IO.IOException: The network name cannot be found exception.
    However, if we log into the windows server 2008 r2 machine under the account that the service is running on, it starts working, and continues to work even when we log out.  It continues to work until we reboot the computer.
    I've already run into and solved other user-centric fixes for 2008.  For example, the "Desktop Experience" feature is required to browse the path and all, and unchecking "automatically detect settings" significantly speeds up browsing of these paths. 
    However, I'm not sure what user logon initializes that would be fixing this problem.

    I can further simplify this.  The following command will fail initially:
    dir \\myspserver\mypath
    However, running the same command after browsing to the same path in windows explorer succeeds.  At this point I've eliminated the programming as an issue so i will try to post a similar question on technet.  However, please let me know if anybody
    has any further info.

  • Administrators unable to write to a text file created by another Administrator on Windows Server 2008.

    Why are Administrators unable to write to a text file created by another Administrator on Windows Server 2008?
     --- The Administrators already have full control so how do I fix this? ---
    Example:  On a Windows Server 2008 (SP1): user A (who belongs to the Administrators group) logs in and creates a directory C:\foo and creates a file readme.txt in the foo directory.  User B (also a member of the Administrators group) logs in and opens C:\foo\readme.txt in notepad. User B types something and tries to save the file. User B cannot save the file…an option to save as some other file name is presented. The security permissions of C:\foo\readme.txt show that Administrators have full control.  
    Work around 1: Explicitly add user B to have full control over the foo directory. The problem is that all the all other Administrators still need to be added (current and future).
    Work around 2: Change the Users security permission to be full control on the foo directory. (this seems dangerous!)
    It is interesting to not that this same procedure is not a problem in Windows Vista. (Any insight about the difference?)
    Sincerely,
    Ian 

    so there is no way to change this without literally shutting down the UAC?
    I have files that  I need to modify all the time, and it is very annoying to have to save as to my desktop modify and then copy and paste the file again.
    I would also rather not give myself permissions to the entire C:\ Drive even specified Folders or documents, etc......
    You can change these settings without bringing down the UAC
    <!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4; mso-font-charset:0; mso-generic-font-family:roman; mso-font-pitch:variable; mso-font-signature:-1610611985 1107304683 0 0 159 0;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:variable; mso-font-signature:-1610611985 1073750139 0 0 159 0;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-unhide:no; mso-style-qformat:yes; mso-style-parent:""; margin-top:0in; margin-right:0in; margin-bottom:10.0pt; margin-left:0in; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-fareast-font-family:Calibri; mso-bidi-font-family:"Times New Roman";} .MsoChpDefault {mso-style-type:export-only; mso-default-props:yes; font-size:10.0pt; mso-ansi-font-size:10.0pt; mso-bidi-font-size:10.0pt; mso-ascii-font-family:Calibri; mso-fareast-font-family:Calibri; mso-hansi-font-family:Calibri;} @page Section1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in; mso-header-margin:.5in; mso-footer-margin:.5in; mso-paper-source:0;} div.Section1 {page:Section1;} -->
    1.    Click Start, type gpedit.msc and press Enter.
    2.    Expand Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options.
    <!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4; mso-font-charset:0; mso-generic-font-family:roman; mso-font-pitch:variable; mso-font-signature:-1610611985 1107304683 0 0 159 0;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:variable; mso-font-signature:-1610611985 1073750139 0 0 159 0;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-unhide:no; mso-style-qformat:yes; mso-style-parent:""; margin-top:0in; margin-right:0in; margin-bottom:10.0pt; margin-left:0in; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-fareast-font-family:Calibri; mso-bidi-font-family:"Times New Roman";} .MsoChpDefault {mso-style-type:export-only; mso-default-props:yes; font-size:10.0pt; mso-ansi-font-size:10.0pt; mso-bidi-font-size:10.0pt; mso-ascii-font-family:Calibri; mso-fareast-font-family:Calibri; mso-hansi-font-family:Calibri;} @page Section1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in; mso-header-margin:.5in; mso-footer-margin:.5in; mso-paper-source:0;} div.Section1 {page:Section1;} -->
    3.    Double-click “User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode” on the right pane.
    a.    Choose “Elevate without prompting” and click OK.
    b.    Double-Click “User Account Control: Admin Approval Mode for the Built-in Administrator account”, Click Enable, Apply and then OK
    c.     Double-Click “User Account Control: Run all users, including administrators, as standard users”,Click Enable, Apply and then OK
    Then reboot the Server. You should now have the ability to modify any document, etc....

  • Autologin on Windows Server 2008 R2 - local Administrator problem

    I needed an user to autologin on a Windows Server 2008 R2 server.
    Configured it following this guide: http://www.danj.co.uk/2011/06/enable-autologon-for-windows-2008-r2.html
    In addition I added the login information by using the Autologon tool from sysinternals: http://technet.microsoft.com/en-us/sysinternals/bb963905.aspx
    Now the user I configured autologins successfully. The only downside is that now you can login with the local Administrator account by just hitting enter, as it now doesn't check the password and instead has a blank one. I think this comes from the User
    accounts screen where I unticked the checkbox and also the Administrator account is listed. When trying to remove the local Administrator it tells me that it will delete the account. I don't want that.
    How do I keep autologin of the user I configured but also have the local Administrator account check his password?

    Hello,
    please see
    http://www.expta.com/2008/04/how-to-enable-autologon-for-windows.html
    Best regards
    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://blogs.msmvps.com/MWeber
    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
    Twitter:  

  • How to enable javascript in windows server 2008 R2 enterprise ?

    Hi all,
    Hope doing well,
    sir i am using windows server 2008 R2 enterprise operating system.
    i am running my web application in localhost. it's working fine.
    but i have used timer using javascript and some javascript function that is not working in this application.
    i googled many thing and i got one solution that is http://njbblog.blogspot.in/2010/02/issue-windows-server-2008-javascript.html
    i went through this link and i have done the solution but in my another system has the same configuration and same thing i am doing there but it's not
    enabled javascript and my application is not working.
    plz help me. it's urgent
    waiting for reply.
    thanks in advance.
    vicky Bangalore

    Hi Vicky,
    Please make sure that the Javascript is enabled on you IE.
    To do this, please go to Control Panel->Internet
    Options, click on security tab,
    click on customer level button. Please scroll
    down to Scripting, underScripting
    of Java applets, click enable.
    OR
    Please try to start the Internet Explorer with option "Run as Administrator" to see whether it works.
    Regards,
    Rafic
    If you found this post helpful, please give it a "Helpful" vote.
    If it answered your question, remember to mark it as an "Answer".
    This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY suggestion in a test environment before implementing!

  • How to enable hibernation in Windows Server 2008 R2

    Hi 
    I am using Windows Server 2008 R2. I want to enable hibernation on server 2008 R2. I have checked the feature in power options but it dose not show any option for sleep & hibernation. I have tried to enable from command prompt by using powercfg -h on
    but getting error message that this feature is not supported by firmware. I have updated the firmware but still getting same error.
    Also checked with powercfg /energy & getting given below errors.
    Platform Power Management Capabilities:System firmware (BIOS) does not support S3.
    The hardware in this computer does not support the S3 sleep state.
    Platform Power Management Capabilities:System firmware (BIOS) does not support S4 (Hibernate).
    The hardware in this computer does not support the S4 (Hibernate) state.
    Platform Power Management Capabilities:PCI Express Active-State Power Management (ASPM) Disabled
    PCI Express Active-State Power Management (ASPM) has been disabled due to a known incompatibility
    with the hardware in this computer.
    Can anyone suggest me how can I enable hibernation on windows server 2008 R2 64 bit.
    Thanks.

    Hello,
    I hate to suggest the obvious, but i'd say your hardware does not support sleep or hibernate.
    Karl
    When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
    My Blog: Unlock PowerShell
    My Book:
    Windows PowerShell 2.0 Bible
    My E-mail: -join ('6F6C646B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

  • Getting error after enabling the Transaction in SSIS package in Windows Server 2008 R2 Standard machine

    Hi,
    I created a package with "Execute SQL Task and Data Flow Task". I am able to execute successfully in my server having
    "Windows Server 2008 R2 Standard" Operating System.
    But after enabling the Transaction in my SSIS Package I am not able to execute it. It is giving error. The same package is running in my local machine with Transaction enabled on
    Windows 7 Operation System.
    The error which I got in my server after enabling the Transaction is
    "The SSIS Runtime has failed to enlist the OLE DB connection in a distributed transaction with error 0x8004D025 
    "The partner transaction manager has disabled its support for remote/network transactions.".  End Error "
    I search with this error message in google and found some solutions in the following links
    http://social.msdn.microsoft.com/Forums/en-US/7172223f-acbe-4472-8cdf-feec80fd2e64/the-partner-transaction-manager-has-disabled-its-support-for-remotenetwork-transactions
    http://technet.microsoft.com/en-us/library/cc753510(WS.10).aspx
    http://support.microsoft.com/kb/817064
    But none of the above solution is not working. Kindly help me to resolve this issue.
    Thanks in Advance.
    Sridhar

    Hi Sridhar,
    Please compare the DTS settings on the Windows 7 computer and the Windows Server 2008 R2 computer and make sure they are identical.  Make sure the “Allow Inbound” and “Allow Outbound” options are check, and pay attention to the authentication mode as
    well.
    Besides, make sure both Distributed Transaction Coordinator (TCP-In) and Distributed Transaction Coordinator (TCP-Out) rules in Firewall are enabled.
    If the issue persists and there are any security/anti-virus software, temporarily disable the security/anti-virus software and check the issue again.
    Regards,
    Mike Yin
    TechNet Community Support

  • Powershell 2.0 already enabled on my Windows Server 2008 R2 SP1

    I have installed the Powershell ISE feature. 
    Is Powershell 2.0 already enabled on my Windows Server 2008 R2 SP1?
    In DISM /Online /Get-Features none of these pre SP1 exist in  SP1.
    DISM/Online/Enable-Feature/FeatureName:NetFx2-ServerCore
    DISM/Online/Enable-Feature/FeatureName:NetFx2-ServerCore-WOW64
    DISM/Online/Enable-Feature/FeatureName:MicrosoftWindowsPowerShell
     In  SP1 features NetFx3 exists but no MicrosoftWindowsPowerShell.
    How do I enable PowerShell 2.0?

    Hi Philpsophiae,
    By default, Windows PowerShell is not installed on a computer that is running Windows Server 2008 R2 Core. You can use the following methods to install Windows PowerShell on a computer that is running Windows Server 2008 R2 Core.
    How to install Windows PowerShell on a computer that is running Windows Server 2008 R2 Core
    Please feel free to let us know if these methods above are not helpful to you.
    Best Regards,
    Anna Wang

  • Group Policy Administrative Templates not applying on Windows XP SP3 - Windows Server 2008 R2

    I have a Windows 2008 R2 domain with windows 7, and Windows XP SP3 client workstations.
    I have a group policy to deny all access to removable storage in policies/administrative templates/system in user configuration (actually its in the computer configuration as well)
    The problem is the policy is having no effect on the Windows XP machines. It works perfectly on Windows 7 machines.
    Group policy in general is working on the Windows XP machines, as I can successfully map drives, push out scheduled tasks, and push out printers. (All preferences I know and I have GP Preferences client side extensions installed).
    Its almost like the windows XP machines can't "understand" the admin templates from Windows Server 2008 R2.
    Do I need to install something on the windows XP machines? What could be the problem?

    > Its almost like the windows XP machines can't "understand" the admin
    > templates from Windows Server 2008 R2.
    Simply read the "supported on" of these settings... Vista and above
    required.
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • How Do i disable ""enable advance Printing features on windows server 2008 ""

    Hi ,
    I have a windows server 2008 which is used as  a terminal server . Users at remote locations log on to this server via "" DYNDNS"" to user our ERP and company files. We use ""DOT MATRIX PRINTERS "" to print  . As we all know that ""enable advance
    printing feature"" is checked by default on windows server 2008 the format of our ""DOT MATRIX PRINTOUTS "" CHANGE  which creates a big mess. 
    I would like to know if there is any way where i can disable this feature permanently. 

    In previous operating systems, that setting was for designed for  disabling and enabling GDI rendering on the server.  Since you are using a TYPE 4 print driver, there is no GDI rendering and thus this setting is not configurable. 
    If you would like to change this setting, you will need to use a TYPE 3 print driver that does not use XPS rendering.  Then the previous configuration methods you were using will work.
    Alan Morris Windows Printing Team

  • [Windows Server 2008 R2] Slow login as administrator

    Hello,
    the login as an administrator takes too long (about 70 seconds). As an user I can login faster to the server (OS: Windows Server 2008 R2). It took less than 5 seconds.
    There are no unnecessary startup items, neither in the task scheduler. I also checked the registry for damaged user profiles with the file extension ".bak". In the event viewer there's an entry with the ID no. 1530 from the source "User Profile
    Service". Is this a suspicious issue? How can I accelerate the login as an administrator?

    Hi, 
    Login to the server with administrator credentials and check for any specific policies implemented for admin account.
    run rsop.msc or run a command C:\>gpresult /h adminpol.html & Open html file and search for applied group policies for admin user.
    Still problem persists, create another user account with full admin right and check for the difference.
    Regards, Ravikumar P

  • You cannot shadow a session with multiple monitors enabled in Windows Server 2008 R2

    Searching through the forums (and according to KB2484290) it appears that there is no solution to this problem.  We are rolling out thin clients that are using dual monitors exclusively and we were very surprised to find out that we couldn't shadow
    sessions with dual monitors (which to us means that we can't shadow ANY sessions).  This now completely changes our approach to managing these devices. 
    We are running Windows Server 2008 R2 SP1 with Remote Desktop Services installed.  The thin clients are running Windows Embedded Standard 7 with the latest updates / RDP client. All steps have been followed to ensure that the apropriate settings and
    permissions have been set up to allow access into the session. 
    We tested by unchecking the RDP setting “use all my monitors for the remote session”, with that setting disabled shadowing worked
    Questions:
    1. KB2484290 is from Dec 2010 - It's now April 2012, is there a workaround / hotfix for this issue that will allow us to shadow sessions using the native Microsoft tools?
    2. Are there any recommended alternatives (software)?  Free/Paid - doesn't matter we just need something that will work.  I'm sure there are a few options out there but I am looking for suggestions for what people have used in the past that worked
    best for them to help us narrow down the choices.

    Hi,
    In my experience, so far, the workaround is Remote Assistance, Remote Assistance supports multiple monitors, and is the presently recommended solution if you need this functionality. Remote Assistance is a Windows Server Feature that must be explicitly installed
    on Windows Server 2008 R2; it is already installed with the client versions of the operating system.
    More information:
    Remote Assistance Overview
    http://technet.microsoft.com/en-us/library/cc753881.aspx
    Remote Assistance and Resulting Internet Communication in Windows Server 2008
    http://technet.microsoft.com/en-us/library/cc770456(v=ws.10).aspx
    As far as I know, there are some third-party tools can be used as the solution, such as Teamviewer, ISL Online, etc.
    Please Note: The third-party products discussed here are manufactured by companies that are independent of Microsoft. We make no warranty, implied or otherwise, regarding
    these products' performance or reliability.
    Regards,
    Dollar Wang
    Forum Support
    TechNet Subscriber Support
    If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback
    here.
    Technology changes life……

Maybe you are looking for

  • Ipod upgrade

    hi, i have an ancient ipod and thinkin of getiin a new ipod nano for christmas, da only prob is i have a new pc and all my old music is only on my ipod and not on hard drive, if i get new ipod is there any way i can transfer all my music thats on my

  • How to add CC(Closed Captioning) option in OSMF player

    Hi All, How to add cc(closed captioning) options in OSMF Player?

  • To EJB ot Not?

    Hello, We are getting started on a J2EE project which is quite similar to the other J2EE projects prople have been doing ..a typical supply-chain type. We are trying to decide if we should go ahead with an Entity EJB or a JDO. The last I ever worked

  • SA delivery schedule release problem

    Hi all, I am created a schedule agreement (Type LPA) and created delivery schedule for it. When I am trying to release the delilvery schedule using ME84, I am getting the follwing error. Msg No 06/857 -> No message record found. I created condition r

  • 3G network does not work

    Hi, i have a iPhone 3GS and when i try to turn on the 3G network, on the top of the screen it's shown "No service". I can't make any call, text or internet  using 3G, even if the area supports it, but if i turn off it and use the edge/gprs network ev