Question Help with Disabled Local Account

Status
Not open for further replies.

ferarri

Reputable
Jun 11, 2020
8
0
4,520
Hello

I had Admin Local account, few days ago my pc joined an active directory with limited functions. AD admin also disabled my local account, so when i try to login to local account i get " your account is disabled" .
now i want to enable the local account again,
I dont have AD admin PW,
I cant edit group polices.
when I go to safe mode I cant see any other accounts to login except my AD account.
So I tried to edit SAM file through WinRe:
I found out I can access local account through winre>regedit no access is denied will occur.
I load hex dive and edited the SAM file:
HKEY_LOCAL_MACHINE\REPAIR\SAM\Domains\Account\Users\000001F4
The value of 0038 hex was 10 so I didnt change anything.
under user name I saw default account so I guess default account means my AD account. I tried to give admin privileges to default account.
so I changed hex value from 15 to 10 and saved it. after restart I saw no changes. so I got back to winre and loaded sam file again to see if my changes were saved or not ? it was saved so I didnt need to change anything.
but I noticed one thing. the value under HKEY_LOCAL_MACHINE\SAM\ wont update to my modified SAM file i created in System32/config. Why is that? it is supposed to read SAM file from System32/config right?
why I can not see built-in Admin account in safe mode?
any idea how can i enable local account again?
thank you
 

ferarri

Reputable
Jun 11, 2020
8
0
4,520
is this your personal pc
yes but I use it for work. for security reason i can not use Company Network unless I join to AD , it was optional though.
I want to use AD account only when I need the network. so i want both local and AD accounts
 

USAFRet

Titan
Moderator
yes but I use it for work. for security reason i can not use Company Network unless I join to AD , it was optional though.
I want to use AD account only when I need the network. so i want both local and AD accounts
You need to work this out with your employers IT staff.

But this is just one of the issues with wanting to use a personal system for work duties.
 
  • Like
Reactions: ferarri

ferarri

Reputable
Jun 11, 2020
8
0
4,520
I found a solution, it was very easy , using ease of access trick and running cmd to re-enable the local account .
 
Status
Not open for further replies.