The build-in Administrator account in Windows 7 is set to 'disabled' after a 'Prepare for image capture' task

Article:TECH185748  |  Created: 2012-04-03  |  Updated: 2012-12-20  |  Article URL http://www.symantec.com/docs/TECH185748
Article Type
Technical Solution


Environment

Issue



If a customer has enabled the default Window's Administrator account, the account will be disabled after running the 'Prepare for image capture' task.


Error



Because the customer doesn't have another account to log into Windows 7, after the 'Prepare for image capture' task they will be locked out of the system.


Environment



All versions of DS 7.1 up to and including DS 7.1 build 2316


Cause



This is not an issue unique to DS 7.1. By default, Microsoft disables the built-in administrator account because it is a potential security hole.  DS simply supplies a sysprep file to Windows 7 that returns the built-in Administrator to the default state which is 'disabled'


Solution



Prior to running a 'Prepare for image capture' task against a Windows 7 system whose built-in administrator account is enabled to the following:
 

1) On the Notification Server browse to '<install drive>\program files\altiris\notification server\nscap\bin\win32\x86\deployment' from Windows explorer.

2) Rename the exisiting 'unattend.xml' to 'unattend.bak'

3) Download the updated 'unattend.xml' attached to this KB to the directory listed in step 1.

4) Create a new 'Prepare for image capture' task and assign to the Windows 7 system.

 

Note:  The code below re-enables the built-in Administrator account.  It has been added to the unattend.xml file attached to this KB.
 

 

<component name="Microsoft-Windows-Deployment" processorArchitecture="@ProcessArchitecture" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

            <RunSynchronous>

                <RunSynchronousCommand wcm:action="add">

                    <Order>1</Order>

                    <Path>cmd /c net user administrator /active:yes</Path>

                    <Description>Enable Admin</Description>

                </RunSynchronousCommand>

            </RunSynchronous>

        </component>

 

 


Attachments

Unattend.xml file which adds a section to re-enable the built-in Adminstrator account in Windows 7
unattend.xml (4 kBytes)


Article URL http://www.symantec.com/docs/TECH185748


Terms of use for this information are found in Legal Notices