Can't make changes without supplying admin p/w

Question

So, I have one computer on my network that someone must have been playing with and now I can't make any changes at all!

When I tried to check settings for remote software I was having trouble with, I was prompted for my password (not unexpected). Instead of being granted permission to continue, I got an error message stating, "We can't sign you in with this credential because your domain isn't available." there is only one domain and the affected computer is assigned to it as is the user.

Yet, when I check in the system settings it is on the one (and only) domain in the building! I can't even open an elevated command prompt because it wants me to authenticate using my domain p/w. I have even tried the domain admin account and I get the same message.

I tried to go into the local admin account via control panel and can't get in that way either (any time I try any course of action, I am prompted for my admin password that results in the previously mentioned error message).

I tried activating the "hidden" admin account and, you guessed it, I am asked to authenticate.

My guess is someone got into the local user settings and changed (or deleted) the local admin account (or password) or something else. 

I would REALLY like to avoid resetting and re-installing the OS but will as a last resort.

Does anyone have any ideas on how to get around this? And, yes, I know I need to lock down the local settings in group policies (chastising myself).

I'm pretty frustrated at this point and may have left out some details, but I hope not.

Thanks in advance....

Answer 1

Thanks, but I think I'll wait to see if there are any more replies to this forum.

Answer 2

Thanks for the suggestion, Frederik. It is my understanding that since the rollout of Win10, v2004, restore points older than 10 days from the last update cannot be restored.

This is correct.

Answer 3

Thanks for the suggestion, Frederik. It is my understanding that since the rollout of Win10, v2004, restore points older than 10 days from the last update cannot be restored. If true, this problem was discovered just before Christmas and thus, would not be an option. If I've misunderstood, let me know and I'll give it a try.

John

Answer 4

While I was responssible for a client's fleet of PCs I always made sure that I had two active local admin accounts. This enabled me on numerous occasion to avoid re-installing Windows.

I would boot the machine with a Windows Repair disk, then use System Restore to set Windows back by a week or two.