The build-in Administrator account in Windows 7 is set to 'disabled' after a 'Prepare for image capture' task


Article ID: 156182


Updated On:


Deployment Solution


If a customer has enabled the default Window's Administrator account, the account will be disabled after running the 'Prepare for image capture' task.

Because the customer doesn't have another account to log into Windows 7, after the 'Prepare for image capture' task they will be locked out of the system.


This is not an issue unique to DS 7.1. By default, Microsoft disables the built-in administrator account because it is a potential security hole.  DS simply supplies a sysprep file to Windows 7 that returns the built-in Administrator to the default state which is 'disabled'


Prior to running a 'Prepare for image capture' task against a Windows 7 system whose built-in administrator account is enabled to the following:

1) On the Notification Server browse to '<install drive>\program files\altiris\notification server\nscap\bin\win32\x86\deployment' from Windows explorer.

2) Rename the exisiting 'unattend.xml' to 'unattend.bak'

3) Download the updated 'unattend.xml' attached to this KB to the directory listed in step 1.

4) Create a new 'Prepare for image capture' task and assign to the Windows 7 system.


Note:  The code below re-enables the built-in Administrator account.  It has been added to the unattend.xml file attached to this KB.


<component name="Microsoft-Windows-Deployment" processorArchitecture="@ProcessArchitecture" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="" xmlns:xsi="">


                <RunSynchronousCommand wcm:action="add">


                    <Path>cmd /c net user administrator /active:yes</Path>

                    <Description>Enable Admin</Description>






Applies To

All versions of DS 7.1 up to and including DS 7.1 build 2316


unattend.xml get_app