The build-in Administrator account in Windows 7 is set to 'disabled' after a 'Prepare for image capture' task

book

Article ID: 156182

calendar_today

Updated On:

Products

Deployment Solution

Issue/Introduction

If a customer has enabled the default Window's Administrator account, the account will be disabled after running the 'Prepare for image capture' task.

Because the customer doesn't have another account to log into Windows 7, after the 'Prepare for image capture' task they will be locked out of the system.

Cause

This is not an issue unique to DS 7.1. By default, Microsoft disables the built-in administrator account because it is a potential security hole.  DS simply supplies a sysprep file to Windows 7 that returns the built-in Administrator to the default state which is 'disabled'

Resolution

Prior to running a 'Prepare for image capture' task against a Windows 7 system whose built-in administrator account is enabled to the following:
 

1) On the Notification Server browse to '<install drive>\program files\altiris\notification server\nscap\bin\win32\x86\deployment' from Windows explorer.

2) Rename the exisiting 'unattend.xml' to 'unattend.bak'

3) Download the updated 'unattend.xml' attached to this KB to the directory listed in step 1.

4) Create a new 'Prepare for image capture' task and assign to the Windows 7 system.

 

Note:  The code below re-enables the built-in Administrator account.  It has been added to the unattend.xml file attached to this KB.
 

 

<component name="Microsoft-Windows-Deployment" processorArchitecture="@ProcessArchitecture" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

            <RunSynchronous>

                <RunSynchronousCommand wcm:action="add">

                    <Order>1</Order>

                    <Path>cmd /c net user administrator /active:yes</Path>

                    <Description>Enable Admin</Description>

                </RunSynchronousCommand>

            </RunSynchronous>

        </component>

 

 


Applies To

All versions of DS 7.1 up to and including DS 7.1 build 2316

Attachments

unattend.xml get_app