Re: disable or rename administrator account

If you wish to rename all the local admin accounts there is a gpo setting
available to do this.

--
Paul Bergson
MCT, MCSE, MCSA, Security+, BS CSi
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"UBEST" <ubest@xxxxxxxxx> wrote in message
news:pv2hf2hc847r2a7i854t76b428ocpdoclo@xxxxxxxxxx
Hello,

For security reason, we have to disable or rename Domain administrator
account and domain member server's local administrator account.
We have some concerns about tha changes:

Can anyone please answer the following concerns?

If we rename or disable administrator account for AD or Windows 2003
local administrator account, what are impacts on disaster recovery of
AD and standalone Windows 2003 servers, member servers.

For a standalone or member server, if we disable or rename local
administrator account, when disaster happens, when we have to run
disaster recovery, for example, recovery console mode, system will
prompt you with administratror password, if we disable or rename
bulit-in administrator account, can we still be able to get in
recovery console mode? and How?

If we do system repair partion of Windows 2003 setup, if we are
prompted with Administrator password, how can we get along this this
step.

For reanme or disabling AD administrator account, if disaster happens
to AD, how will it affect disaster recovery procedure?

Thanks


.

Relevant Pages

  • Re: cannot rename Administrator account
    ... This will tell you who has the authorization to rename the Administrator account. ... Per user Group Policy Restrictions for XP Home and XP Pro ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Account Rename Policy
    ... Unchange what changed and rename the account back to what it was. ... Joe Richards Microsoft MVP Windows Server Directory Services ... Global administrator account policy,so tell me what i have to in GPO. ...
    (microsoft.public.windows.server.active_directory)
  • Re: renamed administrator on xp 64-bit
    ... > am unable to rename it back to administrator. ... > this Windows tell me that this account already exists - ... Bill please repost to the specific group for the support of your preview ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Change administrator name using OSD
    ... You can rename the account using Group Policy or through an ADSI script. ... new "non-Admin" Administrator account in its place. ... Installation scripts are able to capture and restore local group membership ...
    (microsoft.public.sms.tools)
  • disable or rename administrator account
    ... we have to disable or rename Domain administrator ... If we rename or disable administrator account for AD or Windows 2003 ... disaster recovery, for example, recovery console mode, system will ... For reanme or disabling AD administrator account, ...
    (microsoft.public.windows.server.active_directory)