Re: builtin administrator password

Tech-Archive recommends: Fix windows errors by optimizing your registry


"Li" <li.mcknight@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:e9Mvme6pHHA.3368@xxxxxxxxxxxxxxxxxxxxxxx
For some reason, I noticed that our builtin administrator password got
changed, which cause our backup unable to attach the servers. This is the
second time it happened. Can someone tell me where I can find out where
and what causes our administrator password changed?

Any response will be greatly appreciated!!!

It's pretty hard (or impossible) to tell "after the fact" but if you enable
Account Management Auditing you might see how this happens in the
future.

Of course if it is just being changed by someone (an admin?) logging
onto this account then you will see only that.

You probably should consider having a SEPARATE service account
for such things -- make the password non-expiring and cannot be
changed (also very long and complex, e.g., 20+ characters).

Make sure (tell them all and enforce it) that no admin logs on with
THE Admin account but that each uses their own admin account
so that tracking applies individually too.

And reduce the number of admins. Delegations of OUs and even
services means that you don't need as many admins as you did in the
past.

--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)


.

Relevant Pages

  • Re: Incoming E-Mail - cant create contact in OU
    ... central admin pool different than the web app. ... that account a little (if the web app is compromised or something, ... So I started with giving the app pool account domain admins permissions then ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Security Breach in AD! Help!
    ... > about 5 minutes the user was removed from the built in admin group. ... > changed the default domain policy, the default domain controller policy, ... >> auditing of account logon for success and failure and account management ... >> success and failure in Domain Controller Security Policy. ...
    (microsoft.public.win2000.security)
  • Re: cant verify disk
    ... She went to DU, and when she pressed "verify disk", it asked her user ... Disk Utility has required an administrator name and password for certain ... This is clearly a task which requires admin privileges, ... seriously mucked up with her user account settings in the NetInfo ...
    (comp.sys.mac.system)
  • Re: Wscript within VBA
    ... One box is running VBA code,. ... One box is a domain controller, or has an account trusted to manipulate AD ... >> It posts a form to an ASP page, ... >> Since what you want to do sounds like it will require admin privileges, ...
    (microsoft.public.vb.database)
  • Re: Administrators Group in Local Users and Groups
    ... using the Account Operators group is doing your work like you ... * create separate admin accounts to perform admin tasks, ... * Create an OU for the Admin roles and the admin tasks ... > I do not see a problem with adding junior admins to the Account Operators ...
    (microsoft.public.windows.server.active_directory)