Get access to a domain user account?

Question

Domain name market

Situation: laptop, operating system Windows XP Prof, the computer is in a domain.
The user has been working with a configured autologin under a domain user account for a long time. After manipulations unknown to anyone, the system began to ask for a password to enter.
It so happened that the user himself did not operate the computer with the local network of the enterprise for a long time, using the mobile Internet at home, so the system administrators do not know what password is set for the accounts of the local administrator and this domain user.
At the moment, when trying to log in with a domain administrator account without using remote access, the system reports: "Interactive logon on this computer is prohibited by local policy." When authorizing using remote, a message appears: "There are no connections available to all users."
It is likely that the computer does not see the domain controller due to a disabled LAN connection or some other reason.
Tell me what can be done in this situation to gain access to a domain or local admin user account?

Answer 1

You can use one of the password reset utilities.
For example, this one: pogostick.net/ ~pnh/ntpasswd/

Answer 2

I advise you to use any boot disk to reset the local administrator password. One thing is not clear why you do not want to give the laptop to the domain administrators or the support department, they will definitely figure out the problem.

Answer 3

maybe your "admins" log in to the domain, but you need to select "this computer% hostname%"

Answer 4

You will need:
Bootable livecd with win* (Win7 installer is perfect);
WindowsGate.
By any method to get to the data, via liveCD, by connecting the laptop hard drive to another PC (if SATA - elementary, if IDE - USB adapter for 300 rubles).
Launch WindowsGate, select the desired OS, check the Utilman hack checkbox.
Boot into the OS, press Win + U, run CMD.exe, run gpedit.msc in it ,
see the contents of these parameters and change if necessary:

​​(in "Local login" should be at least Administrators and Users)
Return to CMD , run gpupdate /force , try to login.
If successful, boot from LiveCD again, start WindowsGate, uncheck Utilman hack ;)

Answer 5

This is not possible without authorization. If everything is so bad and too lazy to figure it out, then again clean the HKCU (HKLM)\Software\Microsoft\Windows\CurrentVersion\Policies registry branches from the boot disk. DON'T FORGET TO MAKE A BACKUP FIRST!!!

Answer 6

Step 1. Check if the domain controller is available. We check the logs of the controller or the ping command from the domain.
Step 2. If the domain is available remotely, we cling to the laptop console (mmc) and see what happened to the local admin account.
Just the other day there was a similar situation. If you have any questions write in a personal.
The backup step of the domain admin can pick up the registry remotely and see what's there.
Another option (expensive) to connect to a laptop ip-kvm

Answer 7

If a computer has not been in the enterprise network for more than 30 days, then it may have an expired computer account, see KB 216393, it indicates what to look for in the event log on the controller. If so, then you will have to reset the administrator account, for example, through the “Offline NT Password & Registry Editor”, then reset the computer account.
If you still have access to the domain controller, then you can move the computer to separate OUs in AD, attach a policy to this OU that gives local access rights to domain users (as shown above - only through the domain policy) and establishes membership in the local administrators group for domain administrators . By the way, such a policy in any case will not be superfluous.