[Promote User Or Get Admin Access]

I'll give Hiren's Boot CD a shot. I'm hoping that I can just add a new admin id and login locally.

If local logins disabled, am I sol? Is there no way to alter the group policies in say, safe mode (assuming that I can get to safe mode)? I know that there exist an "Administrator" and a "Guest" (disabled) id on the machine. The IT guy used that Admin id to allow java to install an upgrade recently on my machine...

Looking at the utilities on Hiren's and UBCD..... which allows one to add a new user to the existing installation?

[Promote User Or Get Admin Access]

Your system admin must have locked down the option booting from USB or CD in the BIOS.

For the OP, you could use either UBCD4WIN or Hiren's boot CD, which is what I used before to reset my work's computer admin password. But there is an utility in Hiren's boot CD that will allow you to create a local user account. If that doesn't work, group police must be disabling local logins or completely wiping off the account.

A word of caution for the OP, just be careful not to get caught.

I'll give Hiren's Boot CD a shot. I'm hoping that I can just add a new admin id and login locally.

If local logins disabled, am I sol? Is there no way to alter the group policies in say, safe mode (assuming that I can get to safe mode)? I know that there exist an "Administrator" and a "Guest" (disabled) id on the machine. The IT guy used that Admin id to allow java to install an upgrade recently on my machine...

[Promote User Or Get Admin Access]

Depends on the policy and if your login is Domain only and if they even have local admin accounts for non-domain logins. You would have to boot locally to add a local user.

What you can try though, is 1, right click anything like a cmd window shortcut, and click "Run as Administrator". If they enabled admin accounts with no password prompt, it will launch it as admin, then can start any process as admin from a console. If that works, then try the next one - 2, elevate your privileges to SYSTEM. Try the following, in a BAT script. This will make you SYSTEM, and while so, some things will work, some will not, but should allow you to install software if it runs and add local users as admin, so later on, when you need to do something as admin, right click, run as, and pick the new local user you created.

@echo off
@break off
title root
cls


sc create evil binpath= "cmd.exe /K start" type= own type= interact > nul 2>&1
pause
sc start evil > nul 2>&1
pause
whoami
pause
rem ping 127.0.0.1 -n 4 > nul 2>&1
echo Removing service.
echo.
sc delete evil > nul 2>&1

Save it as SYSTEM.bat, right click it, and "Run as administrator".

And 3rd, boot off a live windows disc, like UBCD4WIN, and add a new user to the system with admin capabilities, reboot, logon locally with that account to do your install for ALL users, reboot and log back on to the domain and hope the files show up in the start menu.

Mind you, any of these methods, could get you fired. You are messing with your employers machines, and if they have policies in place you bypass, you could also be breaking the law if something unexpectedly bad happens on the network as a result(virii, malware outbreak due to you bypassing restrictions, etc). You do so at your own risk.

Thank you very much for the reply. I was not aware that I can add admin users with UBCD4WIN and the like. Sounds like this is my best option. Yes, my login is Domain only and there are no admin accts with no pwd prompt. I will prep a UBCD4WIN and try that method.

At worst, if they find out, i would only get a slap on the wrist. I plan to install a virtual environment, so i would not mess up the machine or introduce any virus to the network.

Thanks again!

[Promote User Or Get Admin Access]

my job upgraded to win7 and now all admin rights have been revoked...meaning that i can not install a thing. Tried ophcrack and other software to get or reset admin password but they also imposed a new group policy and no lanhashes are stored.

is there any way to either get the admin password, or add a new admin user that i could then use to install progs? Im not really concerned about them finding out - i just want to be able to add some basic programs. thanks!