Discussion Locked

Default Admin Id on NT servers

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
The default admistrator id (on NT) is recommended to be changed or revoked after the install of servers for best practice security. However, there are some apps or services that needs the admin id active. What can you do to prevent others from using the admin id maliciously.

5 replies

by ann777

You need to rename the account, not revoke it. Renaming it is recommened; the link to the admin account, the id, remains the same. Most applications use the encoded id of the admin account, not the name. Thus renaming it works.

by caper

Well, the account can be re-named but the SID will remain asociated with the account. This is how malicious users can tell if the account has been renamed so you would be not much further ahead by re-naming the account and expecting it not to be found.

This discussion is closed to new replies.