How to Bypass Domain Admin Password Windows 10

  1. Home
  2. Windows
  3. Windows 10

I have a Dell Vostro laptop running Windows 10 that was returned from a user.  I have found that our local administrator account is no longer a member of the Administrators group.  If I try to add the account to the Administrator group I receive an "Access Denied" error.  If I try to run anything that requires Admin Privileges I get a popup that tells me to enter an Admin account and password with no place to enter such information, the popup only has a "NO" button.  Everything I have tried to Google has instructions that require the entry of an Admin password, which I have no way to enter.

I hope someone out there can tell me how to get around this issue or possibly get into the Default Administrator Account so I can use that to change my local Admin privileges.

This is the only laptop of this type, so cloning isn't an option.

Last resort I can wipe the hard drive and load Windows 7

Thanks,

Gr8pumpkinking


Popular Topics in Windows 10
Which of the following retains the information it's storing when the system power is turned off?
  • ROM
  • CPU
  • RAM
  • GPU
88% of IT pros got this right.

15 Replies

DanielNeffITGuy
DanielNeffITGuy This person is a Verified Professional
This person is a verified professional.
Verify your account to enable IT peers to see that you are a professional.
Dec 11, 2018 at 22:47 UTC

What privileges are assigned to the account from which you're trying to make these changes?  It sounds like you're not logged in with an administrator level account.  You need to use an account that does have local admin level privileges.  Is this machine joined to a domain?  If so, simply log in with a domain admin account and then proceed to check the default local Administrator account's group memberships and reset it's password, as needed.

StandingForChildren
StandingForChildren This person is a Verified Professional
This person is a verified professional.
Verify your account to enable IT peers to see that you are a professional.
Dec 11, 2018 at 23:01 UTC

Wipe it - if it's not obeying your domain rules then who knows what's been done to it.

If the user can still logon, get their data off via USB or, if necessary, replace the drive and then load the existing drive via external USB for access.

Gr8pumpkinking
Gr8pumpkinking This person is a Verified Professional
This person is a verified professional.
Verify your account to enable IT peers to see that you are a professional.
Dec 11, 2018 at 23:11 UTC
DanielNeffITGuyDec 11, 2018 at 5:47 PM

What privileges are assigned to the account from which you're trying to make these changes? It sounds like you're not logged in with an administrator level account. You need to use an account that does have local admin level privileges.

2nd line from OP:  "I have found that our local administrator account is no longer a member of the Administrators group."  Hence my problem.

Also, not a domain machine.

Gr8pumpkinking
Gr8pumpkinking This person is a Verified Professional
This person is a verified professional.
Verify your account to enable IT peers to see that you are a professional.
Dec 11, 2018 at 23:19 UTC

David_CSGDec 11, 2018 at 6:05 PM

Beyond that, if you're authorized to do so, you can reset the local admin password as follows:

https://community.spiceworks.com/how_to/19758-to-reset-a-forgotten-administrator-password-follow-the...

Best of luck.

Thanks David, that looks promising.  I will try it in the morning and if it doesn't work I'll just wipe it.

DanielNeffITGuy
DanielNeffITGuy This person is a Verified Professional
This person is a verified professional.
Verify your account to enable IT peers to see that you are a professional.
Dec 11, 2018 at 23:36 UTC

Gr8pumpkinking wrote:

DanielNeffITGuyDec 11, 2018 at 5:47 PM

What privileges are assigned to the account from which you're trying to make these changes? It sounds like you're not logged in with an administrator level account. You need to use an account that does have local admin level privileges.

2nd line from OP:  "I have found that our local administrator account is no longer a member of the Administrators group."  Hence my problem.

Also, not a domain machine.

Gotcha.  My mistake missing that initial piece of information.

One thought that's coming to mind, although I don't have a lot of time to validate this today, is that you might be able to use one of the various Windows password reset tools on the market, such as this one: https://pogostick.net/~pnh/ntpasswd/.  If I recall correctly, in addition to allowing password resets, I think you can edit group memberships.  I apologize if memory serves me incorrectly, but I think this may work for you.

Gr8pumpkinking
Gr8pumpkinking This person is a Verified Professional
This person is a verified professional.
Verify your account to enable IT peers to see that you are a professional.
Dec 11, 2018 at 23:59 UTC

Ok Thanks!

Trying to get out the door, will check it out tomorrow.

spicehea

You can activate the built-in default administrator account using this trick:

https://community.spiceworks.com/how_to/98035-built-in-administrator-account-enable-or-disable-in-wi...

Or promote your current account to administrator with the PCUnlocker Live CD.

Z77
Z77 This person is a Verified Professional
This person is a verified professional.
Verify your account to enable IT peers to see that you are a professional.
Dec 12, 2018 at 05:51 UTC

Free workaround. You can do this with a Windows recovery/install disc, or with a bootable USB drive with any OS on it that can open and read/modify your PC's hard drive formatted in NTFS.

Boot from other OS or pre boot environment.
Locate c:\windows\system32\sethc.exe and rename it to something else like sethc.exe.old
Find c:\windows\system32\cmd.exe and copy it.
Rename the copy to sethc.exe.
Reboot.
Upon reboot, press shift 5 times and a CMD prompt with full system authority rights will open.

Your commands will be this:

                              net user administrator /active:yes net user administrator yourpasswordhere                            

After that, reboot to return to your normal Windows OS and log in. You can set your original sethc.exe file back if you'd like by doing the earlier steps.

https://www.youtube.com/watch?v=CM8s1-Ix7rA

TB33T

Z77 answer is exactly what I was thinking. Wise words...follow them.

jimender2
jimender2 This person is a Verified Professional
This person is a verified professional.
Verify your account to enable IT peers to see that you are a professional.
Dec 12, 2018 at 09:48 UTC

Use HBCD to edit the account and the account info.

BravesB
BravesB This person is a Verified Professional
This person is a verified professional.
Verify your account to enable IT peers to see that you are a professional.
Dec 12, 2018 at 12:47 UTC

DanielNeffITGuy wrote:

Gr8pumpkinking wrote:

DanielNeffITGuyDec 11, 2018 at 5:47 PM

What privileges are assigned to the account from which you're trying to make these changes? It sounds like you're not logged in with an administrator level account. You need to use an account that does have local admin level privileges.

2nd line from OP:  "I have found that our local administrator account is no longer a member of the Administrators group."  Hence my problem.

Also, not a domain machine.

Gotcha.  My mistake missing that initial piece of information.

One thought that's coming to mind, although I don't have a lot of time to validate this today, is that you might be able to use one of the various Windows password reset tools on the market, such as this one: https://pogostick.net/~pnh/ntpasswd/.  If I recall correctly, in addition to allowing password resets, I think you can edit group memberships.  I apologize if memory serves me incorrectly, but I think this may work for you.

I've used this ntpasswd boot CD a lot to reset (or clear) local admin passwords. It's a handy tool I keep in my CD case. Someone else mentioned the trick of renaming a couple .exe files as a quick and dirty method to gain access to an administrative command prompt which is also quite clever and works, though I myself haven't done that trick yet. You've got some options here...good luck!

Snufykat
Snufykat This person is a Verified Professional
This person is a verified professional.
Verify your account to enable IT peers to see that you are a professional.
Dec 12, 2018 at 12:55 UTC

If there is nothing needed on the disk flatten it and rebuild.

Curious if the tip from Z77 works.

Arthur Maloney
Arthur Maloney This person is a Verified Professional
This person is a verified professional.
Verify your account to enable IT peers to see that you are a professional.
Dec 12, 2018 at 15:52 UTC

If what Z77 doesn't work then I would second slaving the drive to something else, dumping the user data, then wipe and rebuild the machine.

Hearing that the local admin account no longer has admin privileges is very concerning and rebuilding the box may be the best course of action because who know what other funky things are going on in there.

Gr8pumpkinking
Gr8pumpkinking This person is a Verified Professional
This person is a verified professional.
Verify your account to enable IT peers to see that you are a professional.
Dec 12, 2018 at 17:36 UTC

Thanks everyone!

Especially  David_CSG and Z77.  You both gave the same instructions.  I learned something new to use in the future if need be.   Unfortunately, my OS disk will only install not run from CD so I am wiping and Reload.

Thanks Again!

Gr8pumpkinking

This topic has been locked by an administrator and is no longer open for commenting.

To continue this discussion, please ask a new question.

How to Bypass Domain Admin Password Windows 10

Source: https://community.spiceworks.com/topic/2181063-how-can-i-bypass-an-administrator-account-password-in-windows-10

0 Response to "How to Bypass Domain Admin Password Windows 10"

Post a Comment

Iklan Atas Artikel

Iklan Tengah Artikel 1

Iklan Tengah Artikel 2

Iklan Bawah Artikel