Re: Account Rename Policy

OIC. What the policies apply to depends on what policy was modified and what it was linked to as well as whether or not there is a competing policy.

Obviously something changed, kind of hard to guess what it could be from the outside.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



Shaik wrote:
Hi Paul / Joe,

Don't get confuse i will explain clearly with some example.Thing i have TESTnamed DC and XYZ is a system is the member TEST domain.

TEST.COM --- Domain Controller
XYZ --- Member of TEST domain -->FQDN - XYZ.TEST.COM

Iam applied Administrator Account rename group policy (3 months before) for all member systems in a TEST.COM Domain,it is renamed the adminstrator account only in member of domain systems(i.e.XYZ.TEST.COM),but now only(after 3 months) its renaming the builtin global administrator account in the DC also.
My Question is if group policy work like this means why its not renamed the builtin global administrator account in the DC before 3 months.

Now i thing you will get my points.

Thanks Shaik

"Joe Richards [MVP]" wrote:

Yes there appears to be confusion here on several levels. :)

As Paul indicates Shaik, there is one builtin administrator account in the domain that exists on domain controllers.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



Paul Bergson wrote:
There is no local admin account on a DC, only the global admin account. So confused on what you are confused on.

--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA http://www.pbbergs.com Please no e-mails, any questions should be posted in the NewsGroup This posting is provided "AS IS" with no warranties, and confers no rights. "Shaik" <Shaik@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:C7E0C86B-93C1-4E37-BFAE-BB1FCCC71BF7@xxxxxxxxxxxxxxxx
> > Hi Joe,
> >
> > Before it was renamed the administrator account which is in member of
> > domains system only.Now only iam facing this problem(Renaming domain
> > controller administrator account).Thats my confusion.
> >
> > Thanks
> > Shaik
> >
> > "Joe Richards [MVP]" wrote:
> >
>> >> That is what that policy setting does... it renames the builtin
>> >> administrator ID.
>> >>
>> >> --
>> >> Joe Richards Microsoft MVP Windows Server Directory Services
>> >> Author of O'Reilly Active Directory Third Edition
>> >> www.joeware.net
>> >>
>> >>
>> >> ---O'Reilly Active Directory Third Edition now available---
>> >>
>> >> http://www.joeware.net/win/ad3e.htm
>> >>
>> >>
>> >>
>> >> Shaik wrote:
>>> >> > Hi All,
>>> >> >
>>> >> > For one of my domain controller i applied rename administrator
>>> >> > account
>>> >> > group policy,it is working fine,but with small Problem.It is renaming
>>> >> > the
>>> >> > built in administrator account also.How to prevent this one.Pls any
>>> >> > body let
>>> >> > me know.
>>> >> >
>>> >> > Thanks
>>> >> > Shaik
>> >>

.

Relevant Pages

  • Re: Account Rename Policy
    ... Don't get confuse i will explain clearly with some example.Thing i have ... TESTnamed DC and XYZ is a system is the member TEST domain. ... Iam applied Administrator Account rename group policy for ... months) its renaming the builtin global administrator account in the DC ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Rename Policy
    ... "Paul Bergson" wrote: ... TESTnamed DC and XYZ is a system is the member TEST domain. ... Iam applied Administrator Account rename group policy ... months) its renaming the builtin global administrator account in the DC ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Rename Policy
    ... TESTnamed DC and XYZ is a system is the member TEST domain. ... Iam applied Administrator Account rename group policy ... months) its renaming the builtin global administrator account in the DC ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Rename Policy
    ... Ok something changed in GPO leavethat one.But I don,t want to rename the ... Global administrator account policy,so tell me what i have to in GPO. ... TESTnamed DC and XYZ is a system is the member TEST domain. ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO errors in application eventlog
    ... The rename administrator account policy was not enabled. ... 1202 - SceCli "Security policies were propagated with warning. ... Check if the "Rename Administrator Account" security policy is enabled. ...
    (microsoft.public.windows.server.sbs)