How to remotely restore access to a computer on which Domain Administrators have been removed from Administrators?

Question

Active Directory

There is a DOMAIN computer under Windows 7, on which the "Domain Admins" group is not included in the local "Administrators" group (maybe something else has been tweaked). I have domain administrator rights and local administrator password for this computer. However, almost no remote management tools can be used. The Local Users and Groups snap-in lets you see the users/groups, but you can't change anything. Remote desktop, psexec, wmic, tasklist, sc (service management), C$ (service balls), regedit and reg -- all denied access. GP also does not work for some unknown reason. Can it be cured without physical access to the computer?

Answer 1

when connecting to this computer, when specifying a username, set the login in the form COMPNAME\local_admin

Answer 2

Unfortunately, this is not possible remotely, by design. Only locally.

Answer 3

1. Try to reconnect
net use \\remote_machine /delete
net use \\remotecomp /user:\\remotecomp\local_admin password
And only then try to call the management snap-in.
2. Try to perform step 1. from a non-domain computer.
3.Teamviewer/remote desktop?

Answer 4

There is a way that sometimes you have to use, but not sleep in front of the user.
You make a batch file with the necessary commands, where you run them naturally as an administrator.
Add it to the user's scheduler on "at boot", "login" and reboot the computer.