Re: Change administrator name using OSD

You can rename the account using Group Policy or through an ADSI script.

USMT will not migrate group memberships.

There are solutions in the Solution Accelerator for Business Desktop
Deployment that can take care of both of these. There is an "RnameADM.vbs"
script that takes care of renaming the Administrator account and creating a
new "non-Admin" Administrator account in its place. The Zero Touch
Installation scripts are able to capture and restore local group membership
(by default, only for Administrator and Power Users).

-Michael Niehaus
Systems Design Engineer
mniehaus@xxxxxxxxxxxxx
This posting is provided "AS IS" with no warranties, and confers no rights.


"sopplayer" <sopplayer@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:74F6279C-0BB4-4FE8-8791-520EF21F90B9@xxxxxxxxxxxxxxxx
> We have a policy that all administrator account names must be changed. I
> know this is a fairly common security practice but I have not been able to
> figure out how to accomplish this using OSDP.
> Also, if I rename the administrator account (before running an OSD
> package)
> and then run the OSD package the renamed admin account is given user level
> rights, a new administrator account is created and the password I chose
> when
> creating the package is assigned to the administrator account. All other
> local members of the administrators group retain their group membership.
> However, all domain level users lose their administrator group membership
> (I
> am not using state migration).
>
> So my three questions:
> Is there a way to set OSD packages to rename the administrator account?
> Is there a way to set OSD so that already renamed administrator accounts
> are
> left alone?
> Is there a way to keep domain account group memberships without using
> USMT?
>
> Thanks
> Bill
>
>


.

Relevant Pages

  • Re: cannot rename Administrator account
    ... This will tell you who has the authorization to rename the Administrator account. ... Per user Group Policy Restrictions for XP Home and XP Pro ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Account Rename Policy
    ... Unchange what changed and rename the account back to what it was. ... Joe Richards Microsoft MVP Windows Server Directory Services ... Global administrator account policy,so tell me what i have to in GPO. ...
    (microsoft.public.windows.server.active_directory)
  • Re: disable or rename administrator account
    ... If you wish to rename all the local admin accounts there is a gpo setting ... account and domain member server's local administrator account. ... If we rename or disable administrator account for AD or Windows 2003 ... disaster recovery, for example, recovery console mode, system will ...
    (microsoft.public.windows.server.active_directory)
  • Re: renamed administrator on xp 64-bit
    ... > am unable to rename it back to administrator. ... > this Windows tell me that this account already exists - ... Bill please repost to the specific group for the support of your preview ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Renaming W2K AD Administrator Account
    ... You probably shouldn't name the 'new' admin account admin or root ... > I'm not sure why you'd leave the administrator account active though (even ... I used to advocate renaming Administrator, defining a Junk ... and only group membership be in Junk (which was used nowhere ...
    (microsoft.public.win2000.security)