Discussion Locked

Administrator lockout

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

The original Administrator account in our NT 4 domain gets locked out.

About a year ago, it was renamed, but later on the name was changed backt to the original. I have inspected the SID, and it ends in 500, so it really is the original Administrator account.

Are there any settings in NT4 that somehow remove some of the builtin protection of this account?

Yours sincerely

Dagfinn

3 replies

by alan.foley

Dagfinn,
In many cases it is usually caused by an accidental attempt to login "locally on a workstation" using the wrong credentails. It has been recommended by several magazine/books to copy the original "administrator" account, rename it to something else for use, chging the password. Then create a new account called "administrator" and giving it guest rights. The SANS people I know recommend this action.

by dagfinn.andreassen

By accident, it seems we found the correct answer ourselves. A backoffice server tried to use the administrator account. This account had a password using Scandinavian (non-English) letters, and that must have caused the problem. We have no idea why, but the problem disappeared as soon as we changed the password to all-English characters.

This discussion is closed to new replies.