IT Employment

Ask something
Discussion Locked

Protected Administrative Account

0 helpful
2 replies

by kwoolsey

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Is there any way to configure a 'master' administrative account that cannot be locked out by, let's say, a disgruntled member of an IT team. This account would be protected (A restricted OU?) and the password held be a very select few. (Windows 2000/3 Active Directory)

The main worry is that someone could lock out or change passwords to the degree of crippling a network. I have just started looking into this and any tips would be fantastic.

Thanks in advance.

2 replies

by lordinfidel

The true domain admin or local administrator account can not be locked out. (without installing a un-supported utility that allows the true admin account to be locked out)

When I say true, I mean the default administrator account that is created when the OS is installed. Not a duplicate of the account.

Any domain admin can change the password of any other domain admins or lower level account, That is just the way it is.

by kwoolsey

But is there any way to protect an administrative account within windows, to isolate it somehow.

This discussion is closed to new replies.