Disabling Local Admin account...

  • Thread starter Thread starter toeknee
  • Start date Start date
T

toeknee

Hi,

I am in the process of deploying PCs. I would like to
have the local administrator account disabled after
imaging it. Can I do this from a command prompt in a
batch file? I do not want to delete it, just disable it.

Thanks,

Tony
 
Why? What happens when you need admin rights out of the domain for some
reason?

Ray at work
 
I already know of this KB. I would like to be able to
run a command line utility that will allow me to disable
the Admin account.
 
toeknee said:
I already know of this KB. I would like to be able to
run a command line utility that will allow me to disable
the Admin account.
Click to expand...

Hi

As it is a change in the local security policy that is needed to "disable" the
local administrator account in Win2k, I would think that you should be able to
automate this using secedit.exe. Run secedit /? for help.
 
net user administrator /active:NO

If you need to do it remotely then consider PsExec from
sysinternals.com or CusrMgr from the ResKit.

CusrMgr -u administrator +s AccountDisabled -m \\PCname

CusrMgr can also add that domain group to the local administrator's
group as well.
Hi,

I am in the process of deploying PCs. I would like to
have the local administrator account disabled after
imaging it. Can I do this from a command prompt in a
batch file? I do not want to delete it, just disable it.

Thanks,

Tony
Click to expand...

Clay Calvert
(e-mail address removed)
Replace "W" with "L"
 
Clay Calvert said:
net user administrator /active:NO
Click to expand...

Hi Clay, that doesn't work for me (Win2000.SP4)

D:\>net user administrator /active:NO
System error 1371 has occurred.

Cannot perform this operation on built-in accounts.
 
Back
Top