Как настроить учетную запись пользователя с неизвестным паролем из учетной записи администратора в Windows 7?

1395
Foo Bar

Я должен администрировать компьютер с Windows 7, для которого у меня есть учетная запись администратора. Компьютер находится в Домене (если это важно). Теперь мне нужно настроить учетную запись пользователя на этом компьютере (также учетную запись домена), поэтому добавьте ярлыки на рабочий стол и т. Д. Но я не знаю пароль для этой учетной записи. Мне не разрешено менять пароль на сервере домена (SBS 2011), потому что пользователю необходимо удаленно войти в свою учетную запись Exchange со своим паролем (который больше не будет работать, если я его поменяю). Запрашивать у пользователя пароль невозможно, это нарушит все мои личные и корпоративные правила безопасности.

Итак, как я могу (с учетной записью администратора) настроить учетную запись пользователя на компьютере под управлением Windows 7, не зная пароля для учетной записи пользователя?

В Linux я просто работаю rootили занимаюсь sudo, но не знаю, как выполнять подобные задачи в Windows.

2

3 ответа на вопрос

2
td512

You could do one of a couple of things:

  • Gain access to the users home (Just hit continue on You don't have permission to access this folder), (\Users\username) and update shortcuts there, get the user to logon and hope that the PC syncs with the server.
  • Update shortcuts in \Users\Public\Desktop - This will only apply locally
2
Wes Sayeed

Has the user ever signed into this computer before?

If yes, then all you need to do is drop any files/shortcuts you want directly into the user's profile folder under C:\Users. If you need to change settings for the user, you can mount their registry hive in Regedit from your account by opening the NTUSER.DAT file in their profile. You'd need to figure out what keys correspond to what settings, but it's doable with a little work on your part.

If not, then the user does not have a cached profile on the computer for you to work with, and therefore you'll have to pull off some wizardry to make it happen. Here are a couple ways you could do it:

  • Use some remote control program like TeamViewer, LogMeIn, GoToMyPC, or whatever -- anything that will allow the user to connect remotely to a login screen -- and have the user sign into this computer from wherever they are. You can then modify their profile right then and there and they still wouldn't have disclosed their password to you. This would be my preferred suggestion.
  • If the computer in question is going to be assigned to them (i.e. they will be the only person using it), then you can modify the default user profile by dropping files into folders under C:\Users\Default. You can also make the aforementioned registry changes by mounting C:\Users\Default\NTUSER.DAT in Regedit. The drawback to this is that it will affect every user that signs into this computer for the first time (users who have previously signed in will not be affected).
  • Make the user's domain account a roaming profile. If they sign into any computer in your organization after you make the change, Windows will sync a copy of their profile to the network. You can then modify the server copy of their profile and it will be pulled down to any machine they sign into. Once they've signed into this computer the first time, you can revert it back to a normal profile. This option has some downsides though. Actually this option is a terrible idea and you should only do it as a last resort :-)

There may be some others that I haven't thought of, but if they've never signed into this computer before then the bottom line is that you'll need to get creative.

0
David

You could try and use Windows Easy Transfer - this would create the user profile and copy any files from the host PC that contains the user profile you need.

This can be done over the network and the tools are installed on all Win 7 PC's

Похожие вопросы