Disabled local admin account on win7
I am creating a new image for Windows 7 SP1. I need to leave the local administrator account enabled and password protected as we don't want the new build PC's joining the domain automatically. We have an image on SCCM 2007 which is deploying fine but the local administrator account is disabled when the PC boots to the logon prompt. In the Task Sequence I've already ticked the option to leave the account enabled and set the password but it keeps imaging the PC's with a disabled admin account. Due to the nature of this work the PC's can't go onto the new domain immediatly after they're built so using GP is out of the question, any ideas?
Answers (4)
in your answer file add
<component name="Microsoft-Windows-Deployment" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<RunSynchronous>
<RunSynchronousCommand wcm:action="add">
<Path>net user administrator /active:yes</Path>
<Order>1</Order>
</RunSynchronousCommand>
</RunSynchronous>
</component>
Did you see this link
http://technet.microsoft.com/en-us/library/dd744293(v=ws.10).aspx
if you can run post task like the k2000 does you can just add the line
net user administrator /active:yes
A better option (imo) is to just create a local administrator account.
I.E.
<LocalAccount wcm:action="add"> <Name>[USERNAME]</Name> <Group>Administrators</Group> <Password> <PlainText>true</PlainText> <Value> [PASSWORD]</Value> </Password> </LocalAccount>
This is in the oobesystem pass.
