locked
Administrator account 'corrupt'? RRS feed

  • Question

  • Is it possible for the system-created Administrator account to become corrupt, causing problems when running certain tasks or programs?

    A software vendor is telling me that the account is corrupt and causing issues on the server (2003 R2) which was just brought into production a month ago without any problems prior to being put into production.

    If the account is corrupt, is there a way to rebuild it without rebuilding the server OS from the ground up?

    We are experiencing several problems on the server that was running fine for months prior to being brought into production. I've posted some of the problems on TechNet in separate threads, hoping to resolve them without starting all over with this server.

    Saturday, February 23, 2013 11:06 AM

Answers

  • The local Administrator account cannot be deleted or disabled, but it can be renamed. It should be a member of the local Administrators group and have the well-known RID "500". At a command prompt, "net user Administrator" will show all but the objectSID. In what way could it be corrupt?


    Richard Mueller - MVP Directory Services

    • Proposed as answer by Meinolf Weber Sunday, February 24, 2013 2:08 AM
    • Marked as answer by Vivian_Wang Wednesday, February 27, 2013 7:23 AM
    Sunday, February 24, 2013 12:06 AM

All replies

  • You can create a new account with local administrative rights, logon with new account, then after saving off docs, etc. from corrupt/abandoned profiles use Control Panel|Users and Passwords and delete the old profile stores. Then when you next logon a new profile is created from an image in\default user

     

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    • Proposed as answer by Meinolf Weber Sunday, February 24, 2013 2:08 AM
    Saturday, February 23, 2013 3:57 PM
  • The local Administrator account cannot be deleted or disabled, but it can be renamed. It should be a member of the local Administrators group and have the well-known RID "500". At a command prompt, "net user Administrator" will show all but the objectSID. In what way could it be corrupt?


    Richard Mueller - MVP Directory Services

    • Proposed as answer by Meinolf Weber Sunday, February 24, 2013 2:08 AM
    • Marked as answer by Vivian_Wang Wednesday, February 27, 2013 7:23 AM
    Sunday, February 24, 2013 12:06 AM
  • Not the account but the profile. This profile is just as susceptible as other profiles to corruption usually current user hive (something in ntuser.dat) but easily fixed.

     

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Sunday, February 24, 2013 12:09 AM