The win10 host loses trust with the domain controller and has no administrator privileges

The win10 host loses trust with the domain controller, and there is no local administrator user locally for win10 (the local administrator user is restricted in the group restricted by group policy, and the local administrator is removed from the administrators group). There is only one local non-administrator user, admin, and cannot obtain local administrator rights.

Troubleshooting ideas:

1. Click "computer"-> Properties-> change the settings to enter the administrator user name and password. You cannot withdraw the domain to establish trust in the added domain.

2. View local users and groups. When you enable administrator users, you will be prompted to enter the administrator user name and account number.

3. Prompt for rejection through the cmd,net user administrator / active:yes command

4. Change the administrator password after entering through win PE, but the administrator cannot be enabled.

5. Enable the local administrator through Group Policy, indicating that you do not have permissions and cannot open the Group Policy Editor

6. Restore the system through win10, indicating that the system cannot be restored without an administrator account.

None of the above methods work, there are no administrator privileges of the account and password

The final solution:

Enter through winPE, find the osk.exe under c:\ windows\ system32, and rename it to osk.exe.bak

Rename cmd.exe under c:\ windows\ system32\ to osk.exe restart

In the login screen, when you enter your user name and password, click easy to use-> screen keyboard, the cmd window will pop up. Enter net user administrator / active:yes successfully at this time.