Windows 10: Creating a User certificate CSR for default admin account

Hello, we plan on deploying factory fresh Windows 10 machines to our users direct from manufacturer. They will initially connect to our VPN for 'domain-joining' of their factory fresh laptops,

However, our VPN connection requires a user certificate for authentication.

How can I generate a generic 'admin' user certificate for deployment to all of these factory fresh computers BEFORE they connect to our domain ?

I have already tried creating a CSR on another domain joined machine and submitting this to our CA however I am unable to alter the 'Issued to' and 'Subject' fields to a generic 'admin' username.

Thank you for any help.

:)

 

My admin account switched to a user account!

The first of the many diagrams in this thread show that the link Sign in with a local account instead is displayed for the account that is currently logged on and so the reversion procedure might work for this account. For normal circumstances, that would initiate the conversion back to a local account for the user account currently logged in - see my 23rd & 26th September 2016 posts in revert to local account from one converted to MSAccount. I have no way of knowing how Windows will react to an attempt to use this procedure for the Built-In Admin account and I do not know if that link Sign in with a local account instead will be displayed or not.

I think I side-stepped this issue by suggesting that that

• An extra password-protected Admin level account is created, and
• The Built-In Admin is disabled, and
• The recovery attempt focuses on whichever existing user account remains active afterwards.

Personally, I would reinstall Windows 10 without even attempting this recovery. Installation takes very little effort once everything is backed up and the only necessary user interactions are right at the start & right at the end so it can be initiated before making a pot of tea. It took about 30, 60 & 90 minutes for each of my computers [the 30 minuter is 6 months old, the 60 minuter is 7 years old, 90 minuter is 12 years old].

Raner - I am trying to avoid sounding like I am nagging you into doing a clean install.

• Once you have recovered the existing user account you can attempt to re-enable & remove the MSAccount link from your Built-In Admin if that link appears in Settings, Accounts.
• Bree says it cannot be done and I think the same but I have never tried - I have never been able to get to Settings using the Built-In Admin because it cannot run any Windows 10 Apps so I do not know how it can be done [but the diagrams in Bree's link shows that those users got there].
• Even though I have the safety of having created two spare password-protected Admin accounts I would not want to know that my Built-In Admin was sitting in the background but unable to help me if my other accounts were corrupted.

Denis

 

Win 10 - no admin account

Hi,

If you are unable to create a new user account, try to enable the in-built administrator account and check.



To do so, follow the steps.

• 
  Press Windows + X. Click on command prompt (admin)
  
• 
  Type the following command and hit enter
  
  net user administrator /active:yes
  
• 
  Log out and sign in to the default admin account and try to add a new admin user.
  

Let us know the results once you have tried these methods. Hope this information was helpful.

 

Creating an admin account/ Renaming my PC??

Hi,



Thank you for writing to Microsoft Community Forums.



Ideally, if you are using a Local account on the computer and if it’s the only account, it will be an admin account. To check if the account is an admin account, please refer the steps mentioned below:

1. Press Windows key + R, to open
   Run dialog box.
   
2. Type netplwiz and click on
   OK.
   
3. You will find all the user accounts on the computer and if you see Administrator beside your account, the account is an admin account.
   

If you want to change the name of the user account that you are using, you need to create a new user account on the computer. Please follow the steps mentioned in the article

Create a local user or administrator account in Windows 10. Once you create a new user account, follow the steps from the section
Copy files to the new user profile in the article
Fix a corrupted user profile to move the data from the old account to the new account.



Note: The above mentioned article is for Windows 7. However, holds good for Windows 10.



Please reply with the status of the issue, we will be glad to help you further.



Regards,

Nikhar Khare

Microsoft Community - Moderator