Re: Account Rename Policy

I Hope no changes are made in GPO
Shaik

"Paul Bergson" wrote:

My guess would be the gpo wasn't applied against your DC only against your
member server. Recently something changed and the policy is now applied
against your DC.

--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup

This posting is provided "AS IS" with no warranties, and confers no rights.

"Shaik" <Shaik@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5F23EA23-D1F5-4383-A561-BB00427822C8@xxxxxxxxxxxxxxxx
Hi Paul / Joe,

Don't get confuse i will explain clearly with some example.Thing i have
TESTnamed DC and XYZ is a system is the member TEST domain.

TEST.COM --- Domain Controller
XYZ --- Member of TEST domain -->FQDN - XYZ.TEST.COM

Iam applied Administrator Account rename group policy (3 months before)
for
all member systems in a TEST.COM Domain,it is renamed the adminstrator
account only in member of domain systems(i.e.XYZ.TEST.COM),but now
only(after
3 months) its renaming the builtin global administrator account in the DC
also.
My Question is if group policy work like this means why its not renamed
the
builtin global administrator account in the DC before 3 months.

Now i thing you will get my points.

Thanks
Shaik

"Joe Richards [MVP]" wrote:

Yes there appears to be confusion here on several levels. :)

As Paul indicates Shaik, there is one builtin administrator account in
the domain that exists on domain controllers.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



Paul Bergson wrote:
There is no local admin account on a DC, only the global admin account.
So
confused on what you are confused on.

--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com Please no e-mails, any questions should be posted
in the NewsGroup This posting is provided "AS IS" with no warranties,
and confers no rights. "Shaik" <Shaik@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
in message news:C7E0C86B-93C1-4E37-BFAE-BB1FCCC71BF7@xxxxxxxxxxxxxxxx
> > Hi Joe,
> >
> > Before it was renamed the administrator account which is in member
of
> > domains system only.Now only iam facing this problem(Renaming domain
> > controller administrator account).Thats my confusion.
> >
> > Thanks
> > Shaik
> >
> > "Joe Richards [MVP]" wrote:
> >
>> >> That is what that policy setting does... it renames the builtin
>> >> administrator ID.
>> >>
>> >> --
>> >> Joe Richards Microsoft MVP Windows Server Directory Services
>> >> Author of O'Reilly Active Directory Third Edition
>> >> www.joeware.net
>> >>
>> >>
>> >> ---O'Reilly Active Directory Third Edition now available---
>> >>
>> >> http://www.joeware.net/win/ad3e.htm
>> >>
>> >>
>> >>
>> >> Shaik wrote:
>>> >> > Hi All,
>>> >> >
>>> >> > For one of my domain controller i applied rename
administrator
>>> >> > account
>>> >> > group policy,it is working fine,but with small Problem.It is
renaming
>>> >> > the
>>> >> > built in administrator account also.How to prevent this
one.Pls any
>>> >> > body let
>>> >> > me know.
>>> >> >
>>> >> > Thanks
>>> >> > Shaik
>> >>




.

Relevant Pages

  • Re: Account Rename Policy
    ... What the policies apply to depends on what policy was modified and what it was linked to as well as whether or not there is a competing policy. ... Don't get confuse i will explain clearly with some example.Thing i have TESTnamed DC and XYZ is a system is the member TEST domain. ... Iam applied Administrator Account rename group policy for all member systems in a TEST.COM Domain,it is renamed the adminstrator account only in member of domain systems,but now onlyits renaming the builtin global administrator account in the DC also. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Rename Policy
    ... TESTnamed DC and XYZ is a system is the member TEST domain. ... Iam applied Administrator Account rename group policy ... months) its renaming the builtin global administrator account in the DC ...
    (microsoft.public.windows.server.active_directory)
  • Re: Applying GPO in W2K3 and W2K8 - Admin Question
    ... "Paul Bergson" wrote: ... administrator account which wouldn't have policy applied against it. ... I tested then OU applying the Security Filtering to Authenticated ...
    (microsoft.public.windows.server.active_directory)
  • Re: Termserv loses security settings each night
    ... It is a member server in a single-domain forest. ... Domain Security Policy might be the key - see below. ... By default, members of the Remote ... I got it working today by adding a GPO ...
    (microsoft.public.win2000.termserv.apps)
  • Re: Locked out of Win2k Server
    ... >> When you joined the rebuilt machine to the domain it was>> subjected to the Group Policy GPO's of the domain. ... Those GPO settings were still in effect ready to>> configure the machine once it was joined. ... >>>> That you cannot log into the member server with either ...
    (microsoft.public.windows.server.security)