System error 1371 has occurred

Remove From My Forums

Question
Greetings,

Our company’s policy is that users are not to have local admin rights to their computers. However, in a recent audit, we have found over 100 workstations where users do have local admin rights.

I have set up a query and a collection of the machines having users with local admin rights and a list of the users with local admin rights per computer. (Some workstations have multiple users set up with local admin rights, they are reflected in the
query.)

I have created a package with no source files and a program that simply executes the command «net localgroup Administrators %username% /delete». The program is set to run when a user is logged in and with the user’s rights. I have advertised
this so far just to a test machine where I am a local admin. The program is set to execute at every logoff and is set to always re-run.

When I log in and out of my test machine, the command appears to run, but the SCCM client logs show it exits with exit code 1 and is considered a failure. I check the local Administrators group and I’m still there.

Is this the way that I want to be doing this, or is there a better way to clear out users from the local Administrators group?
- Edited by
  
  Monday, October 3, 2011 1:40 PM

Answers

Actually, here’s a slightly better version:

@echo off
SETLOCAL EnableDelayedExpansion

SET PASTUNDERSCORES=0

for /F %%G IN ('net localgroup Administrators') DO (

IF !PASTUNDERSCORES!==1 (
IF NOT "%%G"=="The" (
IF NOT "%%G"=="Administrator" (
IF NOT "%%G"=="Domain Admins" (
echo %%G
)
)
)
) ELSE (
IF "%%G"=="-------------------------------------------------------------------------------" (
SET PASTUNDERSCORES=1
)
)
)

Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys

Marked as answer by
Brett242
Monday, October 3, 2011 8:26 PM

Actually, I sorta solved my own problem, but dropped the .bat file for a VBScript, a bit similar to Jason’s:

Option Explicit

Dim network, group, user
Set network = CreateObject(«WScript.Network»)
Set group = GetObject(«WinNT://» & network.ComputerName & «/Administrators,group»)
For Each user In group.members
If UCase(user.name) <> «ADMINISTRATOR» And UCase(user.name) <> «DOMAIN ADMINS» Then
group.remove user.adspath
End If
Next

This worked PERFECTLY!

I’m putting this out there for anyone else who has a task similar to this where they need to clear out user accounts from local Admin groups.
- Marked as answer by
  Brett242
  Monday, October 3, 2011 8:26 PM

Источник

How to Delete Built-in Administrator Account in Windows 10, 8 and 7

How do I remove the Guest account on Windows 10? Every Windows installation has at least two built-in accounts: Administrator and Guest. These accounts cannot be deleted by default. When you try to delete it from an elevated Command Prompt, you’ll receive the error message:

«System error 1371 has occurred. Cannot perform this operation on built-in accounts«.

If you don’t want to use the built-in Administrator account as it can open up potential security risks, you can disable it or permanently delete it from your computer. In this tutorial we’ll walk you through the steps of deleting built-in Administrator account using a registry hack. Before you proceed, make sure you back up the entire registry, so that you can restore it when you messed up the registry.

How to Delete Built-in Administrator Account?

You should have created at least one administrative account as an alternative, so you won’t lose admin rights to Windows after deleting the built-in Administrator account.

Press the Windows key + R to open the Run command box. Type regedit and press Enter.

Once the Windows Registry is opened, navigate to the SAM key: HKEY_LOCAL_MACHINESAMSAM.

Right-click the SAM key and select Permissions from the context menu.

The above action will open the Permissions window. Select the Administrators group and check Allow checkbox in the Full Control row, and click OK.

Now, back to the Registry Editor window. Select the SAM key in the left pane and press F5 to refresh registry.

You can continue expanding to the key: HKEY_LOCAL_MACHINESAMSAMDomainsAccountUsersNames. You will find a list of all user accounts on the machine. To delete Windows’s built-in Administrator account, right-click the Administrator name and select Delete.

Close Registry Editor and restart your computer. When you open the Local Users and Groups window, you’ll find the built-in Administrator account was deleted successfully.

If you want to restore the built-in Administrator account after deleted, just restore previously backed up registry and the built-in account will be back again.

Источник

Question

Our company’s policy is that users are not to have local admin rights to their computers. However, in a recent audit, we have found over 100 workstations where users do have local admin rights.

I have set up a query and a collection of the machines having users with local admin rights and a list of the users with local admin rights per computer. (Some workstations have multiple users set up with local admin rights, they are reflected in the query.)

I have created a package with no source files and a program that simply executes the command «net localgroup Administrators %username% /delete». The program is set to run when a user is logged in and with the user’s rights. I have advertised this so far just to a test machine where I am a local admin. The program is set to execute at every logoff and is set to always re-run.

When I log in and out of my test machine, the command appears to run, but the SCCM client logs show it exits with exit code 1 and is considered a failure. I check the local Administrators group and I’m still there.

Is this the way that I want to be doing this, or is there a better way to clear out users from the local Administrators group?

Источник

System error 1371 has occurred

Question

Our company’s policy is that users are not to have local admin rights to their computers. However, in a recent audit, we have found over 100 workstations where users do have local admin rights.

Is this the way that I want to be doing this, or is there a better way to clear out users from the local Administrators group?

Источник

System error 1371 has occurred

Question

Our company’s policy is that users are not to have local admin rights to their computers. However, in a recent audit, we have found over 100 workstations where users do have local admin rights.

Is this the way that I want to be doing this, or is there a better way to clear out users from the local Administrators group?

Источник

System error 1371 has occurred

Question

Our company’s policy is that users are not to have local admin rights to their computers. However, in a recent audit, we have found over 100 workstations where users do have local admin rights.

Is this the way that I want to be doing this, or is there a better way to clear out users from the local Administrators group?

Источник

I encounter this System Error 1378 Has Occurred problem when I’ve tried to download windows 10. I»m not good at using computers. What I do know is I’m running Windows 7 home premium. Really need someone help me resolve System Error 1378 Has Occurred problems.

Recommendation: To resolve your PC issues effectively, use the Free Download recommended below. This software is used to scan and repair errors that may be causing your PC crash.

Sometimes, System Error 1378 Has Occurred might be caused by the wrong installation of a software. Before you uninstall the software, you had better perform a totally clean for your computer.

How to clean your computer (win7 or vista)

1. Log on to the computer by using an account that has administrator rights.

2. Click Start, type msconfig.exe in the searching box, and then press Enter to start the System Configuration utility.

Note: If you are prompted for an administrator password or for confirmation, you should type the password or provide confirmation.

3. On the General tab, click the Selective startup option, and then click to clear the Load startup items check box. (The Use Original Boot.ini check box is unavailable.)

4. On the Services tab, click to select the Hide all Microsoft services check box, and then click Disable all.

Note This step lets Microsoft services continue to run. These services include Networking, Plug and Play, Event Logging, Error Reporting, and other services. If you disable these services, you may permanently delete all restore points. Do not do this if you want to use the System Restore utility together with existing restore points.

5. Click OK, and then click Restart.

Reference: http://support.microsoft.com/kb/929135/en-us

What is SmartPCFixer and How Does It Work?

SmartPCFixer scans the Windows registry and finds incorrect or obsolete information in the registry. By fixing these obsolete information in Windows registry, your system will run faster and error free. The backup/restore function of the tool let you backup your whole Windows Registry so you can use it to restore the registry to the current status in case you encounter some system failure. Besides above, the startup and BHO organizer feature let you manage your startup and IE BHO items with ease, and you can control the programs started with Windows and IE more handy with this feature!

Follow the steps below and you can solve the System Error 1378 Has Occurred issue from the computer within minutes.

1. Download SmartPCFixer Now. (Free Download Now)

2. Click Quick Scan to Solve System Error 1378 Has Occurred problems instantly.

3. Click Fix All to remove all computer error and speed up your PC automatically.

Related: Instructions Of Fixing 6716 (0x1a3c) Error Message,Why You Shouldn’t Ignore Dns_error_no_bootfile_if_ds_zone,Fileview.ocx Download Error? Fix It Immediately,Best Way To Troubleshoot Msls31 Dll,How To Deal With Recoverbreak Admins Password For Error
Read More: ,sqlunirl.dll failed to load,sqlunirl.dll could not be loaded,sqlunirl.dll could not be loaded,sqlunirl.dll failed to load. The specified module cannot be found.,sqlunirl.dll windows 10 download

Источник