Start a Conversation

Unsolved

This post is more than 5 years old

S

4317

July 5th, 2018 12:00

Sysprep with 2nd Adminstrator account

Hi everyone.
I following the guides and watching the vids on IA best practice. I have setup the OEM copy of windows, logged in and enabled the default Administrator account. Logged in as Administrator account and deleted the previous local admin that was created by windows setup.

Later in the video it recommends disabling teh Local Administrator account when completed but also says its a best practice to run the sysprep as the Local Administrator.

I've been creating scripts that on final auto-login disables the Local Adminsitrator account and creates a new local Administrator account.

My issue is it always fails on the adding this new custom Admin account to the "Administrators Group".
I know this works as I have tested numberous times with snapshots in the Hyper V environment.

So long story short, do you think I can create another Local Admin account in Computer Management before I sysprep? or will mutliple accounts stop the sysprep from working correctly?

thanks

 

Scott

Moderator

 • 

342 Posts

July 5th, 2018 14:00

Hi Scott - I've built images which include local admin accounts aside from the default local administrator account prior to Sysprep and they work just fine. Microsoft recommends in some of their documentation not to do this.

8 Posts

July 6th, 2018 07:00

Hi @DELL-Tyler M

I have seen the MS docs and posts about not being recommended.

I believe we can add a line in the XML with WSIM editor,

see here: https://www.tenforums.com/installation-upgrade/77079-sysprep-windows-10-ltsb-without-creating-new-user-post938163.html#post938163

 

is there a way in Image Assist to create the local administrator account?

I have tried with scripts with net user /add and powershell create-local user they seem to work in the test bed but when I deploy the image the adding of the user to the Administrators group fails. The user is there but it is not apart of the Local Administrators group. 

I am using the Built-in Administrator and using Autologin set to 2 in order to run these scripts. The last script disables the Builtin Administrator.  This is working correctly, so I am wondering it has to do with the auto join the domain portion?

 

Is there a way to edit the unintended or perhaps add a section in Image Assist where we can add the user creation as part of the deployment?

thanks

 

Scott

 

 

Moderator

 • 

342 Posts

July 6th, 2018 08:00

Scott,

I've added additional local admin accounts to reference builds prior to capturing with ImageAssist and been successful many times. This may be an option for you.

I've been informed that you're in contact with our US helpdesk team.

Cheers,

Tyler

No Events found!

Top