Creating local admin account with CMD

In the modern working environment, more and more users are working remotely. Remote has many advantages however it can create issues with connecting to company resources.

I have had a specific scenario where a user was unable to sign into their domain account remotely, basically locking them out of their computer. 

Luckily the computer had our company remote management software installed on the machine, which allows remote desktop, and command line access to the machine.

After connecting to the machine I tried to sign in with the domain and local admin account however neither of them would work. The computer is remote and the VPN is not connected, so when the user's password is reset on AD it does not update on the user's computer.

To solve this I connected backstage to the user's computer and created a local admin account with the following commands:

 net user /add [*username] [password]

 net localgroup administrators [username] /add

After signing in with the new local admin account I was able to establish a VPN connection to the corporate network. Then I ran the command "gpupdate /force" which synced the group policy on the computer with the server.

After successfully updating the group policy, the user was able to sign in with their new password.

This is just one of the many cases where having the ability to create a local admin account can come in handy.