Disabling Administrator..... creating new?

[P3nnyw1se]

Hi, In sccm2012, Win 7 Task Sequence.
I'm interested in Disabling the standard 'Administrator' account during OSD
It seems fairly easy as there are two possibilities presented to me

1: Enable Administrator
2: Randomly Generate a password and Disable account(recommended)

I wanna take step 2 and then create a new Administrator 'ITadmin' and have the OSD install through that user.
I'm new to Task Sequence and I'm unsure where to go from here to create that new Administrator
I couldn't find anything about it on this forum or google.

But I'm assuming I have to create a new Variable?

[Peter van der Woude]

I would go for the first option and just use a GPO to rename the administrator. Also not that the deployment is done under the system account.

[P3nnyw1se]

Well I'm just going by company politics, besides some programs become problematic if not added through a domain user..
This is a post I just did on StackExchange:

during my Windows 7 OSD.

Going by Company Politics I'm suppose to

A: Disabled the standardlized Administrator (Done, can do that in task sequence) B: Create a new Administrator called 'ITadmin' and set a fixed password C: Join a Domain (Done that aswell in the Task Sequence) D: Use a Domain Admin to install programs that would otherwise give problems if attempted to install through Local Admin, like Dynamics AX

As written I join the computer to the Domain During the OSD, and as Result have the correct Domain Admins added as Administrators through GPO, but I don't know how to use them.

I'm looking at CustomSettings.ini in the MDT pack and thinking its gotta be possible to do it from here? or from the unattend.xml

 

in pseudo here is what I wanna do:

 

AddLocalAdmin: ITadmin

Password: 1234

UseThisAccountToInstallOSD: Domain\Install_User

Password : 1234

 

Any help appreciated, can't seem to google my way out of this one.

[Rocket Man]

For your Local admin account you could:

 

• Create an answerfile OR
• use this script and create a package out of it

@echo off
cls
echo Creating Local Account: ITadmin
pushd %~dp0
echo.
net user ITadmin password1 /ADD /FULLNAME:"ITadmin" /COMMENT:"Built in Local Admin Account" /ACTIVE:YES /PASSWORDCHG:NO /EXPIRES:NEVER
net localgroup "Administrators" ITadmin /add
wmic useraccount where "name='ITadmin'" set PasswordExpires=False
popd

 

 

OR you can use run commandline steps to achieve this also. If you like I will post them tomorrow if the above solutions are not suffice!

OR as Peter mentioned use group policy to change the administrator account name and set the password in the task sequence.

[bcunjak]

if you have orchestrator just do it with a quick runbook

[Bendes]

Disabling the default Administrator (a ramdom password is then genrated) is builtin in Task Sequence :

 

 

 

 

To create a new one, just create an Unattended.xml with WSIM Tool