|
Posted by Al Dunbar on July 13, 2007, 7:46 pm
Please log in for more thread options
> Special Access wrote:
>> On Thu, 12 Jul 2007 21:56:45 -0700, "Steve Riley [MSFT]"
>>
>>> So long as you have a good (that is, long) password on the domain
>>> admin account, there's really no need to change the name. Account
>>> names aren't designed to be secrets, so don't try to hide accounts
>>> by changing their names.
>>>
>>> Steve Riley
>>> steve.riley@microsoft.com
>>> http://blogs.technet.com/steriley
>>>
>>>
>>>> Can I safely change the Domain Administrator account password and
>>>> name and still have access to domain clients? I'm concerned that
>>>> once I change the administrator account I won't have access to the
>>>> clients and will have to bring them all back into the domain to get
>>>> the GPO security back. Any cached policies would still be on the
>>>> laptops untill they login into the domain correct? Do I even need
>>>> to worry about this?
>>>> I remmber the SBS 2000 domain controlers would lose there security
>>>> ID's if you renamed the Domain Administrator account after Dcpromo.
>>>> I'd like to secure the domain controllers as much as possible
>>>> without bringing the domain down for an exteneded period of time.
>>>>
>>>> Thanks,
>>>>
>>
>> while this may be true in the civilian world, the US Gov't world
>> requires the built-in administrator and guest account names be
>> changed.
>>
>> Mike
>
> We did wonder, after changing the administrator account name, if we could
> create an account called "administrator" with Guest (or even fewer)
> permissions and a trivial password as we thought this might really
> frustrate a hacker when they found it.
No reason why that would not be possible, as there is nothing special about
the name "administrator". Of course, it is no secret to the hacking
community that renaming the administrator and leaving a fake one for them to
fool around with is commonly done. As a bit of "security by obscurity", it
probably doesn't hurt - just as long as you do not think this is foolproof
or all you need do to secure your system.
/Al
| 
XML Sitemap