SCCM Console Lockout - urgently needed

[Jeff K]

I had a junior admin do some work and he accedently removed the admin accounts from the sccm console. luckly enough i have read only to a couple of accounts. my huge question is how do i get it back? i really need it, do the DBA's have to restore the database? please help....urgent!!

[anyweb]

yikes that sucks....

 

and yes it's sounds like you need a db restored unless someone else has some bright ideas (back it the current one first), i haven't come across that specific problem before so please research further before taking that drastic action

[Jeff K]

Sorry i cant find anything on this topic any where. if you know of anything please let me know.

[Jizz0]

Wow.

I've never come across that issue myself, but a few suggestions is why not create an Administrator account using NET USER USERNAME PASS command? This, of course, would need to be done offline in WinPE (or similar) mode.

[Jeff K]

Issue is resolved. i have fixed it. here is how it was done.

 

i noticed that the only user that had admin access was the NT Authority\System user. so i did some digging and found this tool called PSEXEC from

 

http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx

 

after getting downloaded and at a command prompt i got access denied still. did some more digging and found the correct syntax whish is

 

rename the psexec.exe to psexec-setup.exe and then at a command prompt use psexec-setup.exe -s (for system account) -i ( for interactive) \\servername cmd (for command prompt)

 

once there i got a cmd prompt for the system by using whoami and got nt authority\system. next I opened mmc and added the snap-in and went through the database connection wizard. gave myself the correct permissions and volia instant access. one word of advice ( needs to be done at the console no rdp sessions, no rdp session using the mstsc /admin ) it doesnt work.

 

but i would like to say a big thanks to everyone who helped out. i really appreaciate it very much.