L
L
LectorDr2012-09-13 20:02:51
System administration
LectorDr, 2012-09-13 20:02:51

The domain user is blocked, he threw off the passwords of the local admin, you need to find out the local domain or workgroup

Good evening, dear habra users, I encountered the following problem, which is quite interesting in my practice for the first time. I will describe point by point:

1. I have a Windows 7 laptop with a blocked domain user, I don’t know the domain admin password, I don’t have access to the server, most likely Windows Server 2008
2. I threw off the local user and admin passwords via livecd The

question is how to find out through livecd or cmd name of the local computer (workgroup)? To check if passwords have been forfeited and so that the user can work outside the domain controller?

Answer the question

In order to leave comments, you need to log in

5 answer(s)
A
amc, 2012-09-13
@amc

Log on as .\Имя пользователя
The computer name is stored in the registry.
As a last resort, use WindowsGate.

J
JDima, 2012-09-13
@JDima

What is the name of your PC? Open regedit, order a search for this word

To find out the name of the PC, you need to drive it in the regedit search. OH SHI…

N
Nikolai Turnaviotov, 2012-09-13
@foxmuldercp

HKLM\System\ControlSet001\Services\TcpIp\parameters, reg_sz "hostname"
is the network hostname.
in the same branch - domain - I have an orggroup, so the parameter is empty, maybe you will have your domain there.
tested on 2k8r2SP1

J
JDima, 2012-09-13
@JDima

how to find out the name of the local computer (workgroup) through livecd or cmd?

So the hostname, the name of the workgroup (where does the domain machine come from?), or the name of the domain?
Threw off the passwords of the local user and admin via livecd
...
find out the name of the local computer (workgroup)? To check if passwords have been forfeited and so that the user can work outside the domain controller?

Log in at least under a local account and see ... What is the question? If the local admin password is reset, then the machine can be taken out of the domain.

V
Vladimir Kivva, 2012-09-13
@zionkv

The use of non-domain users can be blocked by policy, in which case the task becomes a bit more complicated.
What is the name of your PC? Open regedit, search for this word, this way you will know the branches where the name can be stored. Then mount the remote registry from the liveCD (ERDcommander, Alkid, FULLDVD and 2k10 work great) and open the same branch.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question