Re: Account Rename Policy



Hi Paul / Joe,

Don't get confuse i will explain clearly with some example.Thing i have
TESTnamed DC and XYZ is a system is the member TEST domain.

TEST.COM --- Domain Controller
XYZ --- Member of TEST domain -->FQDN - XYZ.TEST.COM

Iam applied Administrator Account rename group policy (3 months before) for
all member systems in a TEST.COM Domain,it is renamed the adminstrator
account only in member of domain systems(i.e.XYZ.TEST.COM),but now only(after
3 months) its renaming the builtin global administrator account in the DC
also.
My Question is if group policy work like this means why its not renamed the
builtin global administrator account in the DC before 3 months.

Now i thing you will get my points.

Thanks
Shaik

"Joe Richards [MVP]" wrote:

Yes there appears to be confusion here on several levels. :)

As Paul indicates Shaik, there is one builtin administrator account in
the domain that exists on domain controllers.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



Paul Bergson wrote:
There is no local admin account on a DC, only the global admin account. So
confused on what you are confused on.

--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com Please no e-mails, any questions should be posted
in the NewsGroup This posting is provided "AS IS" with no warranties,
and confers no rights. "Shaik" <Shaik@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
in message news:C7E0C86B-93C1-4E37-BFAE-BB1FCCC71BF7@xxxxxxxxxxxxxxxx
> > Hi Joe,
> >
> > Before it was renamed the administrator account which is in member of
> > domains system only.Now only iam facing this problem(Renaming domain
> > controller administrator account).Thats my confusion.
> >
> > Thanks
> > Shaik
> >
> > "Joe Richards [MVP]" wrote:
> >
>> >> That is what that policy setting does... it renames the builtin
>> >> administrator ID.
>> >>
>> >> --
>> >> Joe Richards Microsoft MVP Windows Server Directory Services
>> >> Author of O'Reilly Active Directory Third Edition
>> >> www.joeware.net
>> >>
>> >>
>> >> ---O'Reilly Active Directory Third Edition now available---
>> >>
>> >> http://www.joeware.net/win/ad3e.htm
>> >>
>> >>
>> >>
>> >> Shaik wrote:
>>> >> > Hi All,
>>> >> >
>>> >> > For one of my domain controller i applied rename administrator
>>> >> > account
>>> >> > group policy,it is working fine,but with small Problem.It is
renaming
>>> >> > the
>>> >> > built in administrator account also.How to prevent this
one.Pls any
>>> >> > body let
>>> >> > me know.
>>> >> >
>>> >> > Thanks
>>> >> > Shaik
>> >>

.



Relevant Pages

  • Re: Account Rename Policy
    ... TESTnamed DC and XYZ is a system is the member TEST domain. ... Iam applied Administrator Account rename group policy ... months) its renaming the builtin global administrator account in the DC ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Rename Policy
    ... What the policies apply to depends on what policy was modified and what it was linked to as well as whether or not there is a competing policy. ... Don't get confuse i will explain clearly with some example.Thing i have TESTnamed DC and XYZ is a system is the member TEST domain. ... Iam applied Administrator Account rename group policy for all member systems in a TEST.COM Domain,it is renamed the adminstrator account only in member of domain systems,but now onlyits renaming the builtin global administrator account in the DC also. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Rename Policy
    ... Ok something changed in GPO leavethat one.But I don,t want to rename the ... Global administrator account policy,so tell me what i have to in GPO. ... TESTnamed DC and XYZ is a system is the member TEST domain. ...
    (microsoft.public.windows.server.active_directory)
  • Re: No admin login
    ... machine with your RDP session than the one you think? ... The account I'm using is the built in administrator account. ... it's membership and it is a member of the right groups, (administrators, ... domain group Administrators or Domain Admins? ...
    (microsoft.public.windows.server.general)
  • Re: No admin login
    ... different machine with your RDP session than the one you think? ... The account I'm using is the built in administrator account. ... it's membership and it is a member of the right groups, (administrators, ... domain group Administrators or Domain Admins? ...
    (microsoft.public.windows.server.general)