Hi, So I've got this problem: I've captured windows using capture media created by SCCM. I took that wim file and uploaded it to SCCM and placed it in a task sequence(that has been successful plenty of times previously). The task sequence randomized the local admin password and disabled the account. When the task sequence finished I got a login screen for Windows 7, No password combination would work. The task sequence was done via pxe advertisement not boot media. I re-advertised with the local admin password blank, the deployment wen't through fine, loaded up to desktop as administrator. I want to capture a wim using media of a few standard applications, all windows updates and drivers installed. Deploy that image via bootable media or task sequence with the local admin account disabled, is that possible? What's the problem with the login, why does it have to be blank? Not confused but it's friday and 4pm, I'm going to make a stiff drink and I look forward to any response. I felt so close. Cheers -SI

In post install, apply windows settings the account is disabled. Go to that step set it to enabled and set your password.John Marcum | http://myitforum.com/cs2/blogs/jmarcum/|

I would, but they want the local admin account to be disabled.

What do you actually want ? "The task sequence randomized the local admin password and disabled the account. When the task sequence finished I got a login screen for Windows 7, No password combination would work." It looks normal you cannot log in with a disabled account.

So with the local admin password disabled after deployment, I won't be able to boot to desktop at all? I guess I was expecting a boot right to desktop ? If that's the case I'll just have to set a local admin password and it will be the same for every machine i deploy to. The only problem that will arise is a security issue, my supervisor wants each machine to have the local admin account disabled by default and the ability to randomize each local admin password for each machine. Recording each password is dreadful but by far the most secure way to handle local admin passwords. Is there a way to just set the password in task sequence and then change and disable when I join the computer to a domain. He does NOT want the computer to automatically join the domain. It's a small environment roughly 60 machines with the possibility of a 25 machine expansion in the next few months and he wants the SCCM server to be ready by then. Regards, SI

You can consider to join the computers into your domain when deploying. After doing so any domain users can log in with their own domain account. You can disallow local administrator to log on into the computer with group policy. Computer Configuration\Windows Settings\Security Settings\Local Policies\user rights assignment\Deny logon locally Windows 7 Deployment Using SCCM 2007 SP2 - System Center Blog By Birojit - Site Home - TechNet Blogs http://blogs.technet.com/b/birojitn/archive/2010/01/20/windows-7-deployment-using-sccm-2007-sp2.aspxPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.