Windows 10: regarding local admin user account in windows 10

Hi Guys,

I have prepared a powershell script to create local admin user account and I have planned to push it through Intune. There are totally 700 pc's in my Organisation.

I want to know is there any option to have a local user admin account which should be working even when the PC is out of Organisation Domain.


Below is the script that I have prepared to create local admin account through Intune:


$Username = "test"

$Password = "Password12345"

$Description = "Local Admin Account"

$group = "Administrators"

$adsi = [ADSI]"WinNT://$env:COMPUTERNAME"

$existing = $adsi.Children where {$_.SchemaClassName -eq 'user' -and $_.Name -eq $Username }

if $existing -eq $null {

Write-Host "Creating new local user $Username."

& NET USER $Username $Password /add /y /expires:never

& net user $USERNAME /comment:"Local Admin Account”

& net user $USERNAME /fullname:"$Username"

Write-Host "Adding local user $Username to $group."

& NET LOCALGROUP $group $Username /add



}else {

Write-Host "Setting password for existing local user $Username."

$existing.SetPassword$Password

}

Write-Host "Ensuring password for $Username never expires."

& WMIC USERACCOUNT WHERE "Name='$Username'" SET PasswordExpires=FALSE

:)

 

My admin account switched to a user account!

The first of the many diagrams in this thread show that the link Sign in with a local account instead is displayed for the account that is currently logged on and so the reversion procedure might work for this account. For normal circumstances, that would initiate the conversion back to a local account for the user account currently logged in - see my 23rd & 26th September 2016 posts in revert to local account from one converted to MSAccount. I have no way of knowing how Windows will react to an attempt to use this procedure for the Built-In Admin account and I do not know if that link Sign in with a local account instead will be displayed or not.

I think I side-stepped this issue by suggesting that that

• An extra password-protected Admin level account is created, and
• The Built-In Admin is disabled, and
• The recovery attempt focuses on whichever existing user account remains active afterwards.

Personally, I would reinstall Windows 10 without even attempting this recovery. Installation takes very little effort once everything is backed up and the only necessary user interactions are right at the start & right at the end so it can be initiated before making a pot of tea. It took about 30, 60 & 90 minutes for each of my computers [the 30 minuter is 6 months old, the 60 minuter is 7 years old, 90 minuter is 12 years old].

Raner - I am trying to avoid sounding like I am nagging you into doing a clean install.

• Once you have recovered the existing user account you can attempt to re-enable & remove the MSAccount link from your Built-In Admin if that link appears in Settings, Accounts.
• Bree says it cannot be done and I think the same but I have never tried - I have never been able to get to Settings using the Built-In Admin because it cannot run any Windows 10 Apps so I do not know how it can be done [but the diagrams in Bree's link shows that those users got there].
• Even though I have the safety of having created two spare password-protected Admin accounts I would not want to know that my Built-In Admin was sitting in the background but unable to help me if my other accounts were corrupted.

Denis

 

Strange Windows 10 User Account issue.

Unfortunately I had done those steps numerous reboots, it just, reappears for no good reason. The base account isn't even a Microsoft account, it's a local account.

I haven't quite tried the built in administrator account on W10, but so far in my experience on my own computer, the built in account seemed to have absolutely no more control than I did on my own.

It's just strange, I go in, it warns me twice about deleting the account, then it's gone. Reboot, and it's back?

EDIT: Just to specify, both command line and Netplwiz both say only HIS account exists on the computer, it doesn't list this rogue account. This is what I meant in my first post about the fact that even Windows doesn't seem to believe it exists, HALF the time. *Frown

 

Locked Out of Admin Account

Hello Linda,



Thank you for writing to Microsoft Community Forums.

1. Are you using a Microsoft account or a local account?
   
2. Which version of Windows 10 you are using currently?
   
3. Is the other user account an admin account?
   

I suggest you to try using the on screen keyboard at the login page and check if you are able to login to the PC.

1. At the login screen click on the
   ease of access icon at the bottom right hand corner.
   
2. Click on the on screen keyboard to open it.
   
3. Type the password and try to login.
   

If you are using a Microsoft account, I suggest you to refer the article on

how to reset your Microsoft account password.



However, if you are using a local account, then I suggest you to refer the article on

reset your Windows 10 local account password.



Note: While performing these steps, there might be a risk of data loss. You may take a backup of the data before performing the steps.



Hope it helps.

Let us know if you got the help you needed by clicking ‘Yes’ or ‘No’.



Regards,

Prakhar Khare

Microsoft Community – Moderator