MDT - Can I disable the Administrator account

I found threads on how to turn it on and maybe some on how to turn it off. I already see how to have my task sequence *NOT* enable the administrator account. I just remove the corresponding line in the unattend.xml file. However, are there any repercussions
to this? I already changed what account it automatically logs into.

Ultimately what I did was setup Final Configuration 2013,
http://www.deploymentresearch.com/Research/tabid/62/EntryId/122/Final-Configuration-for-MDT-2013-Lite-Touch-now-with-Autologon-support.aspx. I edited it to stop the autologon stuff and added sections to undo what MDT does.
' Disable local administrator account
strComputer = "."
Set objUser = GetObject("WinNT://" & strComputer & "/Administrator")
objUser.AccountDisabled = True
objUser.SetInfo
StatusArea.InnerHTML=StatusArea.InnerHTML & "<BR>" & "Local Administrator Disabled"
'Delete Administrator Filter Change
Set objShell = CreateObject("Wscript.Shell")
objShell.RegDelete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\FilterAdministratorToken"
StatusArea.InnerHTML=StatusArea.InnerHTML & "<BR>" & "Administrator Filter Change removed"

Similar Messages

  • How can i remove the email account without deleting the email account?

    Hi
    I have an old email account which I want to remove from Mail, which I know how to do.  However I don't want to delete these emails but rather park them off-site so that if I ever need them again I can easily re-import.  By removing the email account in preferences it says it will delete all the emails etc. from my computer.  Is my only solution to copy the emails to a different location, then delete the account and if needed re-import at a later date?
    Thanks
    David

    You can do a couple of things.
    You can Export the emails to a .mbox file then Import them in which will create an Import folder in Mail; then delete your email account. Or you can just disable the email account leaving it in your list of accounts only disabled.

  • The new firefox changed my settings, i can only find my administrative account on my laptop, but i'm not logged in as the administrator.

    I am trying to attach files from my user account on my laptop, but when I try to attach them inside a Firefox browser, it only allows me to look at the administrator account and the documents on there. I am not logged into my administrator account, because I obviously only use that for the administrative things on my computer. I'm not sure what to do to change this, I've looked through all of the settings in my new version of Firefox (3.6.11) and I can't find anywhere to change those settings. HELP ME, PLEASE!?

    Check that you do not run Firefox as Administrator.<br />
    Right-click the Firefox desktop shortcut and choose "Properties".<br />
    In the Compatibility tab, make sure that Privilege Level: "Run this program as Administrator" is not selected.

  • How can i disable the credit card from that stolen acc and register to my new account

    Hello everywone i have a big problem.. Somewone stole my apple id and changed everything (email , secret question). In that account was my credit card registered. how can i disable the credit card from that stolen acc and register to my new account ?? thanks for help

    Is it an IMAP or POP account?
    For POP accounts, you can select remove from server under the advanced tab of the account.
    Apple support article with information on receiving a message more than once:
    Mail Problems

  • PE4-Win7: Please run this program from the Administrator account so it can set up your license. Once the license is set up, you can run it from any account.

    Hi,
    I'm using Premiere Elements 4 in Windows 7 (64 bit). When I launch PE I get the following error:
    Please run this program from the Administrator account so it can set up your license. Once the license is set up, you can run it from any account.
    Any idea how to solve it?

    I came across this link online. Please check it out and decide if it will or will not advance your case.
    http://www.howtogeek.com/howto/windows-vista/enable-the-hidden-administrator-account-on-wi ndows-vista/
    ATR

  • Can't get a downloaded menu bar to show up in a Window's user account instance of Firefox other than the administrator account

    In Windowx XP, one can create seperate user accounts or "profiles" so that different people can use a computer and have their files and profiles kept seperate or secured from others. The main account is the Administrator account.
    My problem is I have non-Firefox toolbars that I have downloaded and installed on the Administrators account Firefox toolbar, but I can not get these to show up in any of the seperate user accounts that I have created.
    Is there a way to make these show up? If so, what do I need to do?
    Thank you,
    Blaine Thompson

    Toolbar extensions are installed to the user account / Profile, they're not installed globally. You need to install them separately to each user account / Profile.
    If you know your way around in the Windows Explorer file system, you can drop an extension into the program files Firefox\extensions\ folder and the extension will be installed globally - as each Profile is launched. Right-click the installation button for extensions an use Save Link As... to save the extension to local disk.

  • How can I disable the Junk mail folder for an email account?

    How can I disable the Junk mail folder for an email account?

    Hi scottyfrank68,
    Junk mail filtering can be turned off by going to the Mail menu > Preferences > Junk Mail pane and unchecking the box Enable junk mail filtering. See this article -
    Mail (Mavericks): Junk Mail preferences
    Thanks for using Apple Support Communities.
    Best,
    Brett L 

  • Can I disable the alert "the referenced account is currently locked out..."

    I posted the following on the answers site but was recommended to post here
    http://answers.microsoft.com/en-us/windows/forum/windows_7-security/can-i-disable-the-alert-the-referenced-account-is/0af4441c-2f70-4452-a876-7c582fbd6530
    A client has asked me to enable an account lockout threshold on their domain.
    I have made the appropriate changes in Group Policy and also configured an email notification under Task Scheduler that is triggered by Event ID 4740 appearing in the security log. http://community.spiceworks.com/scripts/show/1588-send-email-on-account-lock-out
    It was when testing this that I noted after the nth incorrect password, I received an on screen alert "the referenced account is currently locked out and cannot be logged on to"
    I tested again with an invalid username and did not get the same message. This is potentially a problem because it means that an attacker sees a difference between a valid username and an invalid username without being required to know any correct
    passwords.
    Is there any way that I can disable this on screen alert so that attackers are not presented with a means to validate usernames?
    I am already aware that account lockouts are no longer in favour for other reasons and have informed the client about the possibility of a denial of service attack that deliberately triggers these lockouts and taken certain steps to mitigate the
    effects.
    However, given that an informed decision has been made to stick with the account lockout policy I would like to be able to mitigate this other undesired consequence if at all possible.

    Hi Matt,
    I understand your concern, although I wasn’t able to find a way to disable or change these embedded Windows messages.
    With Account Lockout policy enabled, the risk that accounts being hacked has been reduced a lot. In addition, we can monitor security logs to determine whether hacking behaviors exist or not.
    More information for you:
    Audit Policy Recommendations
    http://technet.microsoft.com/en-us/library/dn487457.aspx
    Configuring Audit Policies
    http://technet.microsoft.com/en-us/library/dd277403.aspx
    Best Regards,
    Amy

  • I have 2 different accounts at the same websites. Whenever I go to that website, one of my usernames prefills the UN field and I can't access the other account. I cannot overwrite my pre-filled username. Ideas?

    I have 2 different accounts at the same websites. Whenever I go to that website, one of my two user names (always the same one) pre-fills the user-name field and I can't access the other account. The website rightfully rejects my password. I cannot overwrite my pre-filled user-name because the second I hit enter to logon, the original user-name rewrites itself into it's field. Neither of the user names is being saved by firefox anywhere in the "tools"; Options, security, advanced or privacy menu fields.
    I did notice that that website has installed a cookie onto my computer called "_rememberme" which contains the user-name that is plaguing me.
    This is a website that I access for very sensitive and important information and I must have both accounts accessible at different times.
    Thanks, Joshua
    XP, sp3; FF3.6.3
    == This happened ==
    A few times a week
    == I added the second account on this website.

    You need to clear that remember me cookie and make sure that you remove a check mark to remember you on that website.
    Tools > Options > Privacy > Cookies: "Show Cookies"
    You can disable the automatic fill of a name and password.
    See:
    http://kb.mozillazine.org/Password_only_filled_after_entering_user_name
    http://kb.mozillazine.org/signon.autofillForms
    To open the ''about:config'' page, type '''about:config''' in the location (address) bar and press the Enter key, just like you type the url of a website to open a website.
    If you see a warning then you can confirm that you want to access that page.

  • How can I Delete an Administrator Account??

    So I have a Mac Mini where Im the Administrator Account,(have a total of 3 accounts for sis and bro) but i have recently bought me a MacBook Pro, so i want to delete my old account on the Mac Mini, and make my sister the new Administrator...Does anybody have any ideas on how to do that????

    From your account, open the Accounts pane of System Preferences, unlock it, grant your sister administrator access, log in with her account, and delete yours. An account which is logged in can't be deleted through System Preferences, and neither can the only administrator account on the system.
    (47365)

  • How do I enable the administrator account for FTP use.

    I utilized an FTP enabler software to enable FTP on my Mac.  And I can FTP into the subaccounts on my Mac but I can not do so with the Main administrator account (mine).  So I went into terminal to test the Main Administrator, I get the following message.  I'm lost as to what to do to enable FTP with the Administrator account.
    Name (192.168.1.9:Administrator): Administrator
    331 User Administrator accepted, provide password.
    Password:
    530 User Administrator may not use FTP.
    ftp: Login failed
    What I'm trying to do is to be able to scan documents from my Xerox Printer to all the Macs in our home.  I have set up my wife's and daughter's Macs to allow for scanning documents to their accounts on their Macs.  They each are sub accounts as I am the Administrator for their Macs.  Additionallly, I created a subaccount on my Mac and I'm able to scan to it as well. But when I try to scan to my Administrator account, it won't work.
    Any help would be appreciated. I'm using Mountain Lion on all 3 Macs with the latest version.  I enabled FTP on all 3 Macs.

    Thanks for your suggestions but it was more complicated than what you suggested.  I was finally able to find a guy at xerox that was able to resolve the issue.  I believe it involved changing some settings deep inside the bowels of the programming code much like the old days of using MS DOS to change internal settings on a PC.  I watched him do it on my screen and it involved deleting the administrator account from being locked down within the O/S. 
    Regardless, thanks for the suggestion.

  • Macbook air: you do not have sufficient access privileges. you need to run this game from an administrator account??? I'm already on the administrator account?

    I bought a mac game from www.gamehouse.com. Downloaded it and now trying to install to play. But everytime I go to install, a message keeps popping up telling me "Your account doesn't have sufficient access privileges. You will need to run this game once from an administrator account. Afterwards you will be able to run it from this account." I am already on the administrator account. Can someone please help?!

    Only the developer can fix his apparently defective product.

  • HT201240 I there i have a apple ibook  and i need to update but i can't remember the administrator password is there way i can change the administrator the password

    I there i have a apple ibook and i need to update but i can,t remember the administrator password ,is there way i can change the administrator password,

    Changing or resetting an account password

  • How can I disable the Keychain for an application?

    How can I disable the Keychain for an application? A window pops up every time I open a page in Safari asking me for a password. I'm using a student laptop, so while I'm an administrator I lack access to a few things, such as the Keychain Access application. Is there any way to deal with this?

    It's possible you may be able to trick it by creating an Applications folder in your Home directory and moving Safari to it.
    I can't test this but it might work. The problem is that you would miss Safari updates, so you'd have to keep an eye out for them. Another solution may be to download another Safari and install in yourname/Applications.

  • How do I disable the guest account

    Can someone show me how to disable the guess account from the log-in screen?

    if you want to disable, click the url
    most will recommend leaving it there if you use find my mac since it allows a way for thieves to login and connect to the internet (necessary for find my mac to work) without accessing your personal files
    think of it a honeypot security measure if nothing else
    https://discussions.apple.com/message/19126769#19126769

Maybe you are looking for

  • Reg: Proxy error while fetching data from RFC's

    Hi All, I am fetching data from RFC's. When the data is in bulk I am getting an error like: Proxy Error The proxy server received an invalid response from an upstream server. The proxy server could not handle the request POST /webdynpro/dispatcher/sa

  • Ugly code

    My jquery mobile code scripts are redundant and referencing older versions of the core library. I call two different jquery, and one jquery mobile files. The problem is that when I delete one or the other scripts it doesn't reference my stylesheets.

  • 30 g ipod video has malfuntioned

    k i really need some help because i love my ipod but it has malfuntioned i cant do ANYTHING it says its on hold but it isnt and when i hook it up to my computer it says "one of the USB devices attached to this computer has malfuntioned and windows wi

  • AWR report not getting generated hourly

    Hi We have an Oracle EE 11.2.0.1, on which i see that the AWR reports are being generated randomly not every hour , would anyone know if i am missing any config My renetention interval specified SQL> select SNAP_INTERVAL,RETENTION from DBA_HIST_WR_CO

  • Runnable JAR, Main-Class, Class-Path and INDEX.LST

    Some funky finding, don't know whether this is a bug or a feature... I'm using java version "1.4.2_06" Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2_06-b03) Java HotSpot(TM) Client VM (build 1.4.2_06-b03, mixed mode) I observed follwi