Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

A very simple question...

Status
Not open for further replies.

drunkmestupid

Technical User
Dec 17, 2002
35
US
Okay, I have searched through the last month or so on these forums and have been all through Microsoft's Windows 2000 Server site and I cannot seem to find an answer to a simple question I have.

I am setting up a LAN running 1 Windows 2000 Server with 4 Windows 2000 Pro workstations. The only account created for the 2000 Server is "Administrator."

QUESTION IS: Once the server is completely setup and configured, do I simply leave it logged on as "Administrator" (doesn't seem right/smart) or should I create another user account to be logged on? If the later, then how should I configure the user's rights/permissions, etc. Also, I am using Active Directory for user management... so if it is the later, should I create an account through AD or create only a local account?

TIA for your info!
 
You should if you want rename the administrator account for more security, and never forget teh password..
Then make another user with some admin rights, this account will be the one you will use for yourself. In case you need to do something and this acount wont let you do it, then use the admin one. This account must be included in the Domain Admins Group.
If you have AD, you go to AD and create all the accounts from there, the option for creating them in Control Panel will be disable on the Domain Controler. A+, MCP, CCNA
marbinpr@hotmail.com

"I just know that I know nothing"
Socrates (469-399 B.C.E.)

 
You should only be logged on when doing maintenance and/or troubleshooting unless you have services that require you to be logged in. If you are simply setting up a domain controller and Active Directory you don't need to be logged on. All the services run "in the background". As for security, you should "always" change the administrator name because every W2K server by default has the administrator name "Administrator". If you are setting this up as a domain controller you can't log in locally. Hope this helps.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top