Re: Administrator rename Win2003 SBS

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

well, it's all about how your network is exposed on the internet as well.
When I do a Shields up scan of my customer's networks, all ports show as stealth. My customers public IP's don't respond to pings

So unless someone knows that one of my customers exist and specifically has their address, not likely to be found in regular scans

SBS is such an integrated sweet, it's been known to cause issues. Glad you have not had any

--
Cris Hanna [SBS - MVP]
Co-Contributor, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1
Owner, CPU Services, Belleville, IL
A Microsoft Registered Partner
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.


"AllenM" <NoEmail@xxxxxxxxxxx> wrote in message news:uABk4X2zJHA.1716@xxxxxxxxxxxxxxxxxxxxxxx
Just my 2 cents worth here. I personally rename the administrator account.
Yes having a strong password policy certainly is highly recommended. however
considering there are only two equations needed to crack into your network
(username and password) why give them 50% of the answer. The administrator
account everyone knows exists by default.


"Larry Struckmeyer [SBS MVP]" <lstruckmeyer@xxxxxxxxxxxxxxx> wrote in
message news:OlVFsl1zJHA.1416@xxxxxxxxxxxxxxxxxxxxxxx
> Hi Dana:
>
> Put in "very strong passwords" for all accounts. The suggested password
> policies in Server are bare minumums. At 15 characters the passwords
> become virtually unbreakable, especially if you limit the number of
> attemtps to anything less than 100. While purists in the security game
> suggest enforcing random passwords, I fail to see the point as any 15
> character string should be as hard for an unknown attacker to guess as any
> other 15 character string.
>
> Only people who know you would be likely to guess your password is "my
> 12th dog is named fred!" and I don't think even those who know you very
> well would guess "my freD is d0g name 12!" in less than 100 tries, even if
> you told them it included the word fred and they new you had a dog by that
> name.
>
> The word "Password" should be expunged from the language. Use Pass
> Phrases, as in "How mucH is that d0ggy in the wind0W?" or My Sports Team
> 100 Your Sports Team 0 YeA!. These are easy to remember and impossible to
> guess, and a hacking program will not have time to get past the first 100
> words in the rainbow tables if you limit the attemps to 100.
>
> --
> Larry
> Please post the resolution to your
> issue so that others may benefit.
>
>
> "Dana" <NoSpam@xxxxxxx> wrote in message
> news:OSdjiY1zJHA.6132@xxxxxxxxxxxxxxxxxxxxxxx
> OK, I'll set up a different user as for admin & put a very strong pw for
> the actual administrator account.
>
> Thx.
>
>
> "Cris Hanna [SBS - MVP]" <crisnospamhanna@xxxxxxxxxxxxxxxxxxxxx> wrote in
> message news:uZKpdc0zJHA.5964@xxxxxxxxxxxxxxxxxxxxxxx
> I don't recommend it. But make sure that you have a very strong password
> and always have a second domain admin account as well.
>
> --
> Cris Hanna [SBS - MVP]
> Co-Contributor, Windows Small Business Server 2008 Unleashed
> http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1
> Owner, CPU Services, Belleville, IL
> A Microsoft Registered Partner
> ------------------------------------
> MVPs do not work for Microsoft
> Please do not submit questions directly to me.
>
> "Dana" <NoSpam@xxxxxxx> wrote in message
> news:eAluHW0zJHA.1424@xxxxxxxxxxxxxxxxxxxxxxx
> Hi,
>
> As a best practice, should I rename the administrator? If so, how?
>
> Thx,
>
> D
>

Relevant Pages