Windows 10: Creating a User certificate CSR for default admin account

Discus and support Creating a User certificate CSR for default admin account in AntiVirus, Firewalls and System Security to solve the problem; Hello, we plan on deploying factory fresh Windows 10 machines to our users direct from manufacturer. They will initially connect to our VPN for... Discussion in 'AntiVirus, Firewalls and System Security' started by tedauction, Jul 25, 2020.

  1. Creating a User certificate CSR for default admin account


    Hello, we plan on deploying factory fresh Windows 10 machines to our users direct from manufacturer. They will initially connect to our VPN for 'domain-joining' of their factory fresh laptops,

    However, our VPN connection requires a user certificate for authentication.

    How can I generate a generic 'admin' user certificate for deployment to all of these factory fresh computers BEFORE they connect to our domain ?

    I have already tried creating a CSR on another domain joined machine and submitting this to our CA however I am unable to alter the 'Issued to' and 'Subject' fields to a generic 'admin' username.

    Thank you for any help.

    :)
     
    tedauction, Jul 25, 2020
    #1
  2. Try3 Win User

    My admin account switched to a user account!

    The first of the many diagrams in this thread show that the link Sign in with a local account instead is displayed for the account that is currently logged on and so the reversion procedure might work for this account. For normal circumstances, that would initiate the conversion back to a local account for the user account currently logged in - see my 23rd & 26th September 2016 posts in revert to local account from one converted to MSAccount. I have no way of knowing how Windows will react to an attempt to use this procedure for the Built-In Admin account and I do not know if that link Sign in with a local account instead will be displayed or not.

    I think I side-stepped this issue by suggesting that that
    • An extra password-protected Admin level account is created, and
    • The Built-In Admin is disabled, and
    • The recovery attempt focuses on whichever existing user account remains active afterwards.

    Personally, I would reinstall Windows 10 without even attempting this recovery. Installation takes very little effort once everything is backed up and the only necessary user interactions are right at the start & right at the end so it can be initiated before making a pot of tea. It took about 30, 60 & 90 minutes for each of my computers [the 30 minuter is 6 months old, the 60 minuter is 7 years old, 90 minuter is 12 years old].

    Raner - I am trying to avoid sounding like I am nagging you into doing a clean install.
    • Once you have recovered the existing user account you can attempt to re-enable & remove the MSAccount link from your Built-In Admin if that link appears in Settings, Accounts.
    • Bree says it cannot be done and I think the same but I have never tried - I have never been able to get to Settings using the Built-In Admin because it cannot run any Windows 10 Apps so I do not know how it can be done [but the diagrams in Bree's link shows that those users got there].
    • Even though I have the safety of having created two spare password-protected Admin accounts I would not want to know that my Built-In Admin was sitting in the background but unable to help me if my other accounts were corrupted.

    Denis
     
  3. Win 10 - no admin account

    Hi,

    If you are unable to create a new user account, try to enable the in-built administrator account and check.



    To do so, follow the steps.


    • Press Windows + X. Click on command prompt (admin)

    • Type the following command and hit enter

      net user administrator /active:yes

    • Log out and sign in to the default admin account and try to add a new admin user.


    Let us know the results once you have tried these methods. Hope this information was helpful.
     
    Sahil Bali, Jul 25, 2020
    #3
  4. Nikhar_K Win User

    Creating a User certificate CSR for default admin account

    Creating an admin account/ Renaming my PC??

    Hi,



    Thank you for writing to Microsoft Community Forums.



    Ideally, if you are using a Local account on the computer and if it’s the only account, it will be an admin account. To check if the account is an admin account, please refer the steps mentioned below:



    1. Press Windows key + R, to open
      Run
      dialog box.
    2. Type netplwiz and click on
      OK
      .
    3. You will find all the user accounts on the computer and if you see Administrator beside your account, the account is an admin account.


    If you want to change the name of the user account that you are using, you need to create a new user account on the computer. Please follow the steps mentioned in the article

    Create a local user or administrator account in Windows 10
    . Once you create a new user account, follow the steps from the section
    Copy files to the new user profile in the article
    Fix a corrupted user profile
    to move the data from the old account to the new account.



    Note: The above mentioned article is for Windows 7. However, holds good for Windows 10.



    Please reply with the status of the issue, we will be glad to help you further.



    Regards,

    Nikhar Khare

    Microsoft Community - Moderator
     
    Nikhar_K, Jul 25, 2020
    #4
Thema:

Creating a User certificate CSR for default admin account

Loading...
  1. Creating a User certificate CSR for default admin account - Similar Threads - Creating User certificate

  2. Admin and User Account

    in Windows 10 Gaming
    Admin and User Account: Hello,Sorry for the basic of not already asked questions:When I set up my new windows 11 laptop I am the admin and have a Microsoft account. I’m told I should also have a user account. Is that true?Which should be local?If I make the admin local would I still have access to...
  3. Admin and User Account

    in Windows 10 Software and Apps
    Admin and User Account: Hello,Sorry for the basic of not already asked questions:When I set up my new windows 11 laptop I am the admin and have a Microsoft account. I’m told I should also have a user account. Is that true?Which should be local?If I make the admin local would I still have access to...
  4. Can't create a custom CSR using mmc and certificates snap-in on Windows 10

    in Windows 10 Gaming
    Can't create a custom CSR using mmc and certificates snap-in on Windows 10: I am trying to generate a custom CSR using the certificates snap-in for mmc on Windows 10. The certificate I want to create is a client authentication cert using ECC. However, I have run into a persistent issue that is preventing me from generating the CSR. No matter the...
  5. Can't create a custom CSR using mmc and certificates snap-in on Windows 10

    in Windows 10 Software and Apps
    Can't create a custom CSR using mmc and certificates snap-in on Windows 10: I am trying to generate a custom CSR using the certificates snap-in for mmc on Windows 10. The certificate I want to create is a client authentication cert using ECC. However, I have run into a persistent issue that is preventing me from generating the CSR. No matter the...
  6. Can't create a custom CSR using mmc and certificates snap-in on Windows 10

    in Windows 10 Network and Sharing
    Can't create a custom CSR using mmc and certificates snap-in on Windows 10: I am trying to generate a custom CSR using the certificates snap-in for mmc on Windows 10. The certificate I want to create is a client authentication cert using ECC. However, I have run into a persistent issue that is preventing me from generating the CSR. No matter the...
  7. admin/user accounts

    in Windows 10 Gaming
    admin/user accounts: Is there a way to let standard user accounts have access to programs downloaded under the admin account of a Microsoft laptop? Woiuld it depend on the program downloaded? I feel like there is a way to do this but I just can seem to remember. The accounts would be on the same...
  8. admin/user accounts

    in Windows 10 Software and Apps
    admin/user accounts: Is there a way to let standard user accounts have access to programs downloaded under the admin account of a Microsoft laptop? Woiuld it depend on the program downloaded? I feel like there is a way to do this but I just can seem to remember. The accounts would be on the same...
  9. How to create a new admin user account

    in AntiVirus, Firewalls and System Security
    How to create a new admin user account: I'm an administrator. I want to create a new administrator account. Control Panel User Account doesn't show an Add User. https://answers.microsoft.com/en-us/windows/forum/all/how-to-create-a-new-admin-user-account/cbf0d022-3fee-4615-8c67-d5f1038ed86d
  10. Can’t set my admin account as default user Win10

    in Windows 10 Customization
    Can’t set my admin account as default user Win10: My Windows 10 HP laptop froze. I had to hold the power button down to shut off, then restart. When it rebooted, my admin user sccount was no longer the default. I can only access my documents, photos, etc. by going to C: and selecting Users then my sccount. I’ve followed...