Boot single user, find short name of user ls /Users
1) mount uw /
2) launchctl load /System/Library/LaunchDaemons/com.apple.DirectoryServices.plist
3) dscl . append /Groups/admin GroupMembership (short name)
no need to enable root or use a install disk
also if you simply want to read...