Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My Windows 7 (64bit) computer was part of AD, but then I needed to removed it from old domain and join to new domain. I have admin access, so I removed my PC from old domain, renamed it and restarted.

My PC has local admin that I created and the built-in admin account was renamed and disabled. So, after the restart, I tried to login with my local admin account, but was not able. I am sure that my password is correct. I get this message:

"You cannot log on because the logon method you are using is not allowed on this computer."

I really don't understand why Windows 7 won't let me log in as local admin. Now I am stuck in between. My PC was removed from old domain, so I can't use domain accounts to login, and at the same time local account is not working properly.

Would anyone suggest any ideas on how to fix it or why this is the case?

Thanks a lot.

share|improve this question
    
Did the domain that you left have any policies set to prevent local users from logging in ? –  DerekB Mar 20 '11 at 3:26
    
I think so. I just don't get why when I am off that domain its policies still affect this computer. –  AD01 Mar 21 '11 at 1:23
    
There will be a local group policy to prevent local login. There's a video called "Using chntpw to Bypass Group Policy" at youtube.com/watch?v=SRjKMCzmXKQ that will show the sort of thing you need to do to bypass it. (I think, not tried it myself - yet) –  DerekB Mar 21 '11 at 12:02

3 Answers 3

Connect remotely to the file system (c$) and try to delete the policies from the file system at %SystemRoot%\System32\GroupPolicy.

share|improve this answer
    
This is unfortunately the "most correct" answer here. If you ever have a moment it could use a bit of explaining as to why he should move the policy files from the location you mentioned to somewhere else. –  Chris S Jul 31 at 3:55

You can't login since, as you said, your local account is disabled. So if possible, you could add your computer to the domain again and login and activate your local account.

Otherwise you can try to reset the password. I have successfully reset Windows Vista passwords with Offline NT Password & Registry Editor, and I think there was an option to enable accounts, but I don't remember.

share|improve this answer
    
This utility will let you enable the local Administrator account as well. –  techie007 Mar 20 '11 at 15:54
1  
My local account is enabled, but I am not able to login anyway. –  AD01 Mar 21 '11 at 1:24
    
-1 This will let you change the password, but it's a local policy issue preventing login. If the password was wrong then he would get an "incorrect password" error. –  Chris S Jul 31 at 14:55
    
I agree with @Jonas, maybe you can try removing Windows 7 password, here is the guide on how to reset Windows 7 password, wikihow.com/Reset-Lost-Windows-7-Password-Without-Logging-in –  Elmer Aug 15 at 6:46

There are actually a couple of things you can do:

A). You can insert a Windows 7 Installation CD into your drive and boot from it, when it loads choose your language etc and then click repair your computer. It will then search for a Windows installation on your machine, when it finds it, select it and then click Next. Now you should be presented with a list of tools, at the very bottom you can choose command prompt.

This will let you interact with your OS Installation without it being active or having anyone logged in. Then you can run from command line:

net user user_name  new_password

Example:

net user administrator this_is_my_new_pass

B) You can boot any kind of Linux or Command line operating system from a USB drive, a manual can be found here. Then, after booting from your USB drive:

  • Mount your %SystemDrive% (usually your C drive).
  • Go to c:\windows\system32 and rename the file Utilman.exe to whatever.exe and then rename cmd.exe to Utilman.exe.
  • Reboot your computer, and when you get to the Windows Log-in screen, press the Accessibility icon and it will pop up a command line window, then run:
net user administrator this_is_my_new_pass

Then you will be able to log in using the password you just set.

share|improve this answer
    
-1 Still not a password issue... As I've comment on TWO other wrong answers here, it's a local policy issue. –  Chris S Jul 31 at 14:55
    
I realize that @ChrisS , but the second method Will get him inside windows and he'll be able to get the policy issue fixed. –  Itai Ganot Aug 1 at 7:52
    
Nowhere in here do you mention how he can fix the policy issue. He knows his password, that is completely not the issue. –  Chris S Aug 3 at 1:59

protected by RobM Aug 15 at 7:06

Thank you for your interest in this question. Because it has attracted low-quality answers, posting an answer now requires 10 reputation on this site.

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.