| Author | Messages | |
AD000001294
Posts:0
 | | 09/05/2005 11:52 AM |
| I having more than two hundred workstation plugged on my company windows domain and I?d like to rename the local admin account to something like this ?TechTwo? and rest the local admin password to ?!@Tech$?
I am thinking towards scripting to accomplish this task. Is there a well know script I use.
Please point to the right direction
Thank you,
Sibbs
__________________________________________________Do You Yahoo!?Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com | | | |
| AD000001294
Posts:0
| | 09/05/2005 2:06 AM |
| Gene,
You can rename the local admin account on systems participating in an Active Directory environment (this does not apply to systems using the Active Directory Client Extensions) through a group policy object. The setting is located at;
Computer Configuration\Windows Settings\Security Settings\Local Policies/Security Options\Account -> Accounts: Rename administrator account
This does not however change the underlying well known SID of the account, so it can still be detected depending on how your security environment is setup, and what can be executed against the local security databases on your local machines. This would also allow this to be effective for new machines without manual intervention.
I still have not found a solution I?m comfortable enough with to recommend to change the password on a bulk basis. I?m sure others have feedback which will answer this half of the question.
Thanks.
Keith Duemling - end -
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Gene SibbsSent: Monday, September 05, 2005 7:52 AMTo: ActiveDir@xxxxxxxxxxxxxxxxxxSubject: [ActiveDir] Rename Local Admin and Password Rest
I having more than two hundred workstation plugged on my company windows domain and I?d like to rename the local admin account to something like this ?TechTwo? and rest the local admin password to ?!@Tech$?
I am thinking towards scripting to accomplish this task. Is there a well know script I use.
Please point to the right direction
Thank you,
Sibbs
__________________________________________________Do You Yahoo!?Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Disclaimer: This message, including attachments, is confidential and may be privileged. If you are not an intended recipient, please notify the sender immediately by return e-mail, then delete and destroy the original message and all copies. You should not copy, forward and/or disclose this message, in whole or in part, without permission of the sender.
Click here to donate to the Hurricane Katrina relief effort. | | | |
| AD00000928
Posts:0
| | 09/05/2005 5:11 AM |
| http://www.ultratech-llc.com/KB/?File=Passwords.TXT
And I really hope that those passwords and account names were merely examples...
-ASB
FAST, CHEAP, SECURE: Pick Any TWO
http://www.ultratech-llc.com/KB/
On 9/5/05, Gene Sibbs wrote:
> Many thanks Keith, for the pointers.
>
> Other any pointers on howto change the password on a bulk basis?
>
>
> Keith Duemling wrote:
>
>
>
> Gene,
>
>
>
> You can rename the local admin account on systems participating in an Active
> Directory environment (this does not apply to systems using the Active
> Directory Client Extensions) through a group policy object. The setting is
> located at;
>
>
>
> Computer Configuration\Windows Settings\Security Settings\Local
> Policies/Security Options\Account -> Accounts: Rename administrator account
>
>
>
> This does not however change the underlying well known SID of the account,
> so it can still be detected depending on how your security environment is
> setup, and what can be executed against the local security databases on your
> local machines. This would also allow this to be effective for new machines
> without manual intervention.
>
>
>
> I still have not found a solution I'm comfortable enough with to recommend
> to change the password on a bulk basis. I'm sure others have feedback which
> will answer this half of the question.
>
>
>
> Thanks.
>
>
> Keith Duemling
>
> - end -
> ________________________________
>
>
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of
> Gene Sibbs
> Sent: Monday, September 05, 2005 7:52 AM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: [ActiveDir] Rename Local Admin and Password Rest
>
>
>
>
> I having more than two hundred workstation plugged on my company windows
> domain and I'd like to rename the local admin account to something like this
> "TechTwo" and rest the local admin password to "!@Tech$"
>
>
>
> I am thinking towards scripting to accomplish this task. Is there a well
> know script I use.
>
>
>
> Please point to the right direction
>
>
>
> Thank you,
>
>
>
> Sibbs
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| AD000001197
Posts:0
| | 09/05/2005 12:44 PM |
| Gene,
You can rename the local admin account on
systems participating in an Active Directory environment (this does not apply
to systems using the Active Directory Client Extensions) through a group policy
object. The setting is located at;
Computer Configuration\Windows
Settings\Security Settings\Local Policies/Security Options\Account ->
Accounts: Rename administrator account
This does not however change the
underlying well known SID of the account, so it can still be detected depending
on how your security environment is setup, and what can be executed against the
local security databases on your local machines. This would also allow this to
be effective for new machines without manual intervention.
I still have not found a solution I™m
comfortable enough with to recommend to change the password on a bulk basis. I™m
sure others have feedback which will answer this half of the question.
Thanks.
Keith Duemling
- end -
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On
Behalf Of Gene Sibbs
Sent: Monday, September 05, 2005
7:52 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Rename Local
Admin and Password Rest
I having more than two hundred workstation plugged on my company
windows domain and I™d like to rename the local admin account to
something like this TechTwo and rest the local admin password to
!@Tech$
I am thinking towards scripting to accomplish this task. Is there a
well know script I use.
Please point to the right direction
Thank you,
Sibbs
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
Disclaimer: This message, including attachments, is confidential and may be privileged. If you are not an intended recipient, please notify the sender immediately by return e-mail, then delete and destroy the original message and all copies. You should not copy, forward and/or disclose this message, in whole or in part, without permission of the sender. | | | |
| djambo
Posts:0
| | 09/07/2005 2:59 AM |
| | Message body was not found. | | | |
|
|