Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My Windows 7 (64bit) computer was part of AD, but then I needed to removed it from old domain and join to new domain. I have admin access, so I removed my PC from old domain, renamed it and restarted.

My PC has local admin that I created and the built-in admin account was renamed and disabled. So, after the restart, I tried to login with my local admin account, but was not able. I am sure that my password is correct. I get this message:

"You cannot log on because the logon method you are using is not allowed on this computer."

I really don't understand why Windows 7 won't let me log in as local admin. Now I am stuck in between. My PC was removed from old domain, so I can't use domain accounts to login, and at the same time local account is not working properly.

Would anyone suggest any ideas on how to fix it or why this is the case?

Thanks a lot.

share|improve this question
    
Did the domain that you left have any policies set to prevent local users from logging in ? – DerekB Mar 20 '11 at 3:26
    
I think so. I just don't get why when I am off that domain its policies still affect this computer. – AD01 Mar 21 '11 at 1:23
    
There will be a local group policy to prevent local login. There's a video called "Using chntpw to Bypass Group Policy" at youtube.com/watch?v=SRjKMCzmXKQ that will show the sort of thing you need to do to bypass it. (I think, not tried it myself - yet) – DerekB Mar 21 '11 at 12:02

Connect remotely to the file system (c$) and try to delete the policies from the file system at %SystemRoot%\System32\GroupPolicy.

share|improve this answer
    
This is unfortunately the "most correct" answer here. If you ever have a moment it could use a bit of explaining as to why he should move the policy files from the location you mentioned to somewhere else. – Chris S Jul 31 '14 at 3:55

You can't login since, as you said, your local account is disabled. So if possible, you could add your computer to the domain again and login and activate your local account.

Otherwise you can try to reset the password. I have successfully reset Windows Vista passwords with Offline NT Password & Registry Editor, and I think there was an option to enable accounts, but I don't remember.

share|improve this answer
    
This utility will let you enable the local Administrator account as well. – techie007 Mar 20 '11 at 15:54
1  
My local account is enabled, but I am not able to login anyway. – AD01 Mar 21 '11 at 1:24
    
-1 This will let you change the password, but it's a local policy issue preventing login. If the password was wrong then he would get an "incorrect password" error. – Chris S Jul 31 '14 at 14:55
    
I agree with @Jonas, maybe you can try removing Windows 7 password, here is the guide on how to reset Windows 7 password, wikihow.com/Reset-Lost-Windows-7-Password-Without-Logging-in – user237774 Aug 15 '14 at 6:46

protected by RobM Aug 15 '14 at 7:06

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.