Tried that - but once it reboots, the accounts are gone. It seems that safe mode uses a virtualized/temporary SAM.
On Tue, Jul 18, 2017 at 6:19 PM, Joe Tinney <[email protected]> wrote: > You could use net user and localgroup to make and assign an admin user if > the default admin is disabled? Almost sounds like the absence of any enabled > local users could be a cause of the behavior > > On Jul 18, 2017 20:27, "elsalvoz" <[email protected]> wrote: >> >> Alt+ctrl+del 3 times? Used to work with XP. >> >> Can you use computer management remotely to asses groups membership or >> even create a new local user? Psexec? >> >> Cesar A. >> >> On Jul 18, 2017 5:13 PM, "Don Ely" <[email protected]> wrote: >>> >>> .\administrator doesn't let you login? >>> >>> On Tue, Jul 18, 2017 at 4:52 PM Kurt Buff <[email protected]> wrote: >>>> >>>> All, >>>> >>>> A colleague stood up a Win10 VM that was a clone of an original >>>> domain-joined machine, running on a ESXi/vSphere 6.0 host. >>>> >>>> I noticed this, and decided to help out - the VM clone was not fully >>>> functional - it's trust relationship with the domain was broken. >>>> >>>> I was able to log in using cached credentials with administrative >>>> privileges, so I set the local administrator password to something we >>>> know (we use LAPS here, so there's no telling what the most recent >>>> administrator password was). >>>> >>>> I then changed the machine name and joined the VM to a workgroup at >>>> the same time - something I've done probably hundreds of times over >>>> the years with never a failure before now. >>>> >>>> After reboot, the login screen shows only the username of the last >>>> successful login (a domain account, not a local account, even though >>>> it's not a member of the domain!). >>>> >>>> I cannot get it to switch to another account to log in, and since the >>>> only account available on the login screen is the domain account, and >>>> it's not joined to the domain, I can't use that account's password to >>>> log in. >>>> >>>> There are no backups, no restore points and no snapshots for this VM. >>>> >>>> I was able to boot into safe mode in the console, and start a command >>>> prompt - when it asked for the local Administrator account, that >>>> worked, so I know the password is good. >>>> >>>> I've tried to RDP into the machine, and am refused, no matter which >>>> credentials I try. >>>> >>>> I even tried disconnecting the NIC for the VM to see if that would >>>> shake loose some cached credentials, but no go, and it stubbornly >>>> refuses to show me any other accounts to choose for login. >>>> >>>> I suppose I could do a reset, but I believe there's 3rd party software >>>> that was installed in the interim, so I'm a bit hesitant to do that. >>>> >>>> Anyone have thoughts on how to proceed? >>>> >>>> I'm about ready to boot with a Nordahl iso, and see if that helps, but >>>> if push comes to shove, I I'll re-clone the original, and try again, >>>> and let the colleague know that he's lost any work done, but for the >>>> moment this is an exercise in overcoming - something. >>>> >>>> Kurt >>>> >>>> >
