windows 7 deployment - local administrator is disabled
Hello, after windows7 installation through SCCM OS deployment i cannot logon with the local user "Administrator" and receive the message "Your account has beend disabled". i have tried for the entire day but now i am out of ideas. i have a task sequence with the x64boot image, a windows 7x 64 WIM os image, which boots ok from the PXE point and starts the installation. the steps are: partition disk apply operating system apply windows settings (i have set "enable the account and specify local admin password") apply device drivers apply driver package apply network settings (join a domain with correct OU and account) the installation runs without error and in the logfiles i see no errors, this is the log message regarding windows settings: The task sequence execution engine successfully completed the action (Apply Windows Settings) in the group (Install Operating System) with exit code 0 Action output: ============================[ OSDWinSettings.exe ]============================ Command line: "osdwinsettings.exe" /config Setting %SystemRoot% to "C:\WINDOWS" Loading existing answer file "C:\WINDOWS\panther\unattend\unattend.xml" Computer Name: MININT-JE7GPHP Getting namespace "Microsoft-Windows-Shell-Setup" for architecture "amd64" Registered Owner: it.support Getting namespace "Microsoft-Windows-Shell-Setup" for architecture "amd64" Registered Organization: my company name Time Zone: W. Europe Standard Time Time zone: W. Europe Standard Time The OSDProductKey variable is not set in the environment. Not setting the product key in the unattend answer file. Setting local admin password. Writing configuration information to C:\WINDOWS\panther\unattend\unattend.xml Successfully saved configuration information to C:\WINDOWS\panther\unattend\unattend.xml Exiting with return code 0x00000000. why can't i logon to the computer with user "Admininistrator" ? i have tried to add two steps: net user administrator mysupersecretpassword net user administrator /active:yes but still - nothing. the password is with special characters, uppercase letters and numbers, so it can't be too simple for the default policies. Additionally, the domain integration fails - i can ping the computer via network so i assume it's not a driver issue. this is the log message: The task sequence execution engine successfully completed the action (Apply Network Settings) in the group (New Group) with exit code 0 Action output: ==============================[ OSDNetSettings.exe ]=========================== Command line: "osdnetsettings.exe" configure Setting %SystemRoot% to "C:\WINDOWS" Loading existing answer file "C:\WINDOWS\panther\unattend\unattend.xml" Configuring global network settings Join type: 0 Joining domain: mydomain.eu Join OU: LDAP://CN=Computers,DC=mydomain,DC=eu Getting namespace "Microsoft-Windows-UnattendedJoin" for architecture "amd64" DNS domain: DNS domain search order: IP filter sec enabled: false Noadapters found in environment. Performing global configuration only. Writing configuration information to C:\WINDOWS\panther\unattend\unattend.xml Successfully saved configuration information to C:\WINDOWS\panther\unattend\unattend.xml Configuring "OSDNetSettings.exe finalize" to run on first boot OSDNetSettings finished: 0x00000000. why does it tell me that no adapters are found when the computer is pingable on the network? please help...
July 7th, 2010 6:00pm

In Win7 the administrator account is disabled by default which is probably why it's not working. Your net commands should work, but they are not actually windows commands so they can't be run like this. You'll need to make the commands look like this: cmd /c net user administrator pw cmd /c net user administrator /active:yesScott Gill SCCM Consultant
Free Windows Admin Tool Kit Click here and download it now
July 8th, 2010 1:13am

thank you for this information but it still is disbaled. command: cmd /c net user administrator mysupersecretpassword log message: The task sequence execution engine successfully completed the action (Run Command Line - Set Password) in the group (New Group) with exit code 0 Action output: . and: cmd /c net user administrator /active:yes and same log message. anything else i can try? e.g. create new user manually that is administrator on the new machine? edit: i have tried the whole procedure on an entirely different machine, with the same results. admin is disabled, domain add fails because "no adapters found". what am i doing wrong...?
July 8th, 2010 10:19am

i have added another step to try and create a simple new user cmd /c net user /add user pass with result The task sequence execution engine failed executing the action (Run Command Line - add user eglo) in the group (New Group) with the error code 2 Action output: =======================[ smsswd.exe ] ======================= PackageID = '' BaseVar = '', ContinueOnError='' SwdAction = '0001' Set command line: Run command line Working dir 'not set' Executing command line: Run command line Process completed with exit code 2 Command line returned 2. The operating system reported error 2: The system cannot find the file specified. uhm..... ?!
Free Windows Admin Tool Kit Click here and download it now
July 8th, 2010 10:25am

i fixed the domain add problem by choosing a "real" Organizational Unit instead of domain\Computers, the error message "no adapters found in environment" still appears but domain add is ok now. very strange. the disabled admin is still a mystery to me, but no longer a problem now.
July 8th, 2010 11:47am

It's disable with a random password in the task sequence step by default. "Apply Windows Settings" controls the admin account for the TS. MCTS: ConfigMgr, MDT / http://myitforum.com/cs2/blogs/cnackers/default.aspx
Free Windows Admin Tool Kit Click here and download it now
July 8th, 2010 5:49pm

Are the drivers installed and working on the machine? Can you log in to the domain? Also, depending on what symbols you have in your PW, you may need to surround the PW with quotes.Scott Gill SCCM Consultant
July 8th, 2010 9:15pm

By default the Administrator account is disabled when you join a domain. If you start the PC in safe mode you will be able to access the administrator account. I don't know if this helps. We craete a user account that is different from the local admin account in the admin group. That's our way around the disabled admin account.
Free Windows Admin Tool Kit Click here and download it now
October 14th, 2010 10:45pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics