Re: Account Rename Policy



My guess would be the gpo wasn't applied against your DC only against your
member server. Recently something changed and the policy is now applied
against your DC.

--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup

This posting is provided "AS IS" with no warranties, and confers no rights.

"Shaik" <Shaik@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5F23EA23-D1F5-4383-A561-BB00427822C8@xxxxxxxxxxxxxxxx
Hi Paul / Joe,

Don't get confuse i will explain clearly with some example.Thing i have
TESTnamed DC and XYZ is a system is the member TEST domain.

TEST.COM --- Domain Controller
XYZ --- Member of TEST domain -->FQDN - XYZ.TEST.COM

Iam applied Administrator Account rename group policy (3 months before)
for
all member systems in a TEST.COM Domain,it is renamed the adminstrator
account only in member of domain systems(i.e.XYZ.TEST.COM),but now
only(after
3 months) its renaming the builtin global administrator account in the DC
also.
My Question is if group policy work like this means why its not renamed
the
builtin global administrator account in the DC before 3 months.

Now i thing you will get my points.

Thanks
Shaik

"Joe Richards [MVP]" wrote:

Yes there appears to be confusion here on several levels. :)

As Paul indicates Shaik, there is one builtin administrator account in
the domain that exists on domain controllers.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



Paul Bergson wrote:
There is no local admin account on a DC, only the global admin account.
So
confused on what you are confused on.

--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com Please no e-mails, any questions should be posted
in the NewsGroup This posting is provided "AS IS" with no warranties,
and confers no rights. "Shaik" <Shaik@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
in message news:C7E0C86B-93C1-4E37-BFAE-BB1FCCC71BF7@xxxxxxxxxxxxxxxx
> > Hi Joe,
> >
> > Before it was renamed the administrator account which is in member
of
> > domains system only.Now only iam facing this problem(Renaming domain
> > controller administrator account).Thats my confusion.
> >
> > Thanks
> > Shaik
> >
> > "Joe Richards [MVP]" wrote:
> >
>> >> That is what that policy setting does... it renames the builtin
>> >> administrator ID.
>> >>
>> >> --
>> >> Joe Richards Microsoft MVP Windows Server Directory Services
>> >> Author of O'Reilly Active Directory Third Edition
>> >> www.joeware.net
>> >>
>> >>
>> >> ---O'Reilly Active Directory Third Edition now available---
>> >>
>> >> http://www.joeware.net/win/ad3e.htm
>> >>
>> >>
>> >>
>> >> Shaik wrote:
>>> >> > Hi All,
>>> >> >
>>> >> > For one of my domain controller i applied rename
administrator
>>> >> > account
>>> >> > group policy,it is working fine,but with small Problem.It is
renaming
>>> >> > the
>>> >> > built in administrator account also.How to prevent this
one.Pls any
>>> >> > body let
>>> >> > me know.
>>> >> >
>>> >> > Thanks
>>> >> > Shaik
>> >>



.



Relevant Pages

  • Re: Account Rename Policy
    ... Don't get confuse i will explain clearly with some example.Thing i have ... TESTnamed DC and XYZ is a system is the member TEST domain. ... Iam applied Administrator Account rename group policy for ... months) its renaming the builtin global administrator account in the DC ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Rename Policy
    ... "Paul Bergson" wrote: ... TESTnamed DC and XYZ is a system is the member TEST domain. ... Iam applied Administrator Account rename group policy ... months) its renaming the builtin global administrator account in the DC ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Rename Policy
    ... What the policies apply to depends on what policy was modified and what it was linked to as well as whether or not there is a competing policy. ... Don't get confuse i will explain clearly with some example.Thing i have TESTnamed DC and XYZ is a system is the member TEST domain. ... Iam applied Administrator Account rename group policy for all member systems in a TEST.COM Domain,it is renamed the adminstrator account only in member of domain systems,but now onlyits renaming the builtin global administrator account in the DC also. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Rename Policy
    ... Ok something changed in GPO leavethat one.But I don,t want to rename the ... Global administrator account policy,so tell me what i have to in GPO. ... TESTnamed DC and XYZ is a system is the member TEST domain. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Termserv loses security settings each night
    ... It is a member server in a single-domain forest. ... Domain Security Policy might be the key - see below. ... By default, members of the Remote ... I got it working today by adding a GPO ...
    (microsoft.public.win2000.termserv.apps)