My environment is SCCM 2012 SP1. I am deploying Windows 7 Pro SP1 x64 using SCCM. My image was captured using MDT 2012 Update 1. During the build, I am creating two local admin accounts and do not want the local administrator account enabled. However, once the build process completes the two local admin accounts are present but the local administrator account is also enabled. My understanding was that the local administrator account was disabled by default.I have try running a Run Command Line step (cmd.exe /c net user administrator /active:no) during the build right before packages install but the account remains enabled. I do not have anything in my unattend for enabling the administrator account or any steps to enable it. The only change I made to the local administrator was setting a password during the capture process in case I needed to troubleshoot.

Does anyone know what am I missing? Thank you for the assistance.

• Edited by Lorrec 17 hours 29 minutes ago

in your SCCM task sequence right after the "Deploy Operating System" step looking at the "Apply Windows Settings" step. Is the setting checked there to disable administrator account ? "Randomly generate password and disable administrator account" should be selected by default. Anything in customsettings.ini set that may cause this ?

Thanks for the reply. I made sure not to include anything in the CustomSettings.ini. However, you gave me an idea about the Apply Windows Settings step. I had actually removed it. I put it back in and configure it to disable. I am testing now.