Click here to get back home

Rename Domain Admin Account

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Rename Domain Admin Account create_share 06-10-2008
Get Chitika Premium
Posted by Jorge de Almeida Pinto [MVP - on June 10, 2008, 12:23 pm
Please log in for more thread options
you need to define that at domain level. it will only rename the
samaccountname. the RDN will remain the same

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
>I want to rename Domain Admin Account in my windows 2003 Domain Controller.
>Can i use Domain Controller Security Policy to rename it and what will
>happen if i use domain security policy to rename it?
>
> Thanks!


Posted by create_share on June 11, 2008, 5:14 am
Please log in for more thread options
Sorrry! Did not work. I renamed it in Domain Controller Policy and ran
gpupdate /force on domain controller but even after passing one day it is
still the Administrator.


Thanks!

"Jorge de Almeida Pinto [MVP - DS]"
> you need to define that at domain level. it will only rename the
> samaccountname. the RDN will remain the same
>
> --
>
> Cheers,
> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>
> # Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #
>
> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
>
------------------------------------------------------------------------------------------
> * How to ask a question --> http://support.microsoft.com/?id=555375
>
------------------------------------------------------------------------------------------
> * This posting is provided "AS IS" with no warranties and confers no
> rights!
> * Always test ANY suggestion in a test environment before implementing!
>
------------------------------------------------------------------------------------------
> #################################################
> #################################################
>
------------------------------------------------------------------------------------------
>>I want to rename Domain Admin Account in my windows 2003 Domain
>>Controller. Can i use Domain Controller Security Policy to rename it and
>>what will happen if i use domain security policy to rename it?
>>
>> Thanks!
>


Posted by Jorge de Almeida Pinto [MVP - on June 12, 2008, 3:03 pm
Please log in for more thread options
it must happen at domain level

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
> Sorrry! Did not work. I renamed it in Domain Controller Policy and ran
> gpupdate /force on domain controller but even after passing one day it is
> still the Administrator.
>
>
> Thanks!
>
> "Jorge de Almeida Pinto [MVP - DS]"
>> you need to define that at domain level. it will only rename the
>> samaccountname. the RDN will remain the same
>>
>> --
>>
>> Cheers,
>> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>>
>> # Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #
>>
>> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
>> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
>>
------------------------------------------------------------------------------------------
>> * How to ask a question --> http://support.microsoft.com/?id=555375
>>
------------------------------------------------------------------------------------------
>> * This posting is provided "AS IS" with no warranties and confers no
>> rights!
>> * Always test ANY suggestion in a test environment before implementing!
>>
------------------------------------------------------------------------------------------
>> #################################################
>> #################################################
>>
------------------------------------------------------------------------------------------
>>>I want to rename Domain Admin Account in my windows 2003 Domain
>>>Controller. Can i use Domain Controller Security Policy to rename it and
>>>what will happen if i use domain security policy to rename it?
>>>
>>> Thanks!
>>
>


Posted by Roger Abell [MVP] on June 14, 2008, 2:40 am
Please log in for more thread options
>I want to rename Domain Admin Account in my windows 2003 Domain Controller.
>Can i use Domain Controller Security Policy to rename it and what will
>happen if i use domain security policy to rename it?
>

It is easier to just rename it , such as a one-time action in dsa.msc.
If done in DC OU linked GPO it impacts only the built-in Administrator
account
of the domain; if done in a domain linked GPO it also impacts the
Administrator
local account on all domain joined machines (unless a GPO scoped with a more
local link to the container of some machine objects overwrites the value
with
a different password gets used on those machines).

Roger



Posted by Steve Riley [MSFT] on June 15, 2008, 4:40 pm
Please log in for more thread options
Why do you want to do this? Renaming the account doesn't increase its
security. Use a good (meaning long) passphrase and leave the account name at
its default.

--
Steve Riley
steve.riley@microsoft.com
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com



> I want to rename Domain Admin Account in my windows 2003 Domain
> Controller. Can i use Domain Controller Security Policy to rename it and
> what will happen if i use domain security policy to rename it?
>
> Thanks!


Similar ThreadsPosted
domain admin account impersontating November 6, 2006, 8:20 am
GPO not implementing rename of Administrator Account April 27, 2006, 5:19 am
Disable or rename administrator account September 1, 2006, 3:32 pm
Need limited domain admin rights user account. August 8, 2005, 2:33 pm
Built-in domain admin account password will expire January 3, 2007, 3:03 pm
Delegate Control to rename and add/remove computer from domain February 27, 2007, 4:05 pm
Admin account - log actions November 6, 2005, 1:25 pm
connect to event log on a non admin account? December 7, 2005, 4:23 pm
Allowing a Domain User Admin Rights to a Couple of Domain Servers June 29, 2005, 8:13 pm
Adding another domain users to your local domain admin group December 28, 2005, 12:19 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap