Local Administrator is being locked ?

[netwalker1]

Dear All :
I found that some of my servers have a local administrator user locked ???
I know taht the Administrator User by natural can't be locked !

Note that the user has a never expired option checked !!!

any advise where can I check and how this is happeneing ?

Mohamed Farid
[green]Know Me No Pain , No Me Know Pain !!![/green]

 

[itsp1965]

Is it possible someone has renamed the administrator account and created another account called administrator? If you enumerate the SIDs for these accounts the actual administrators account has a SID ending in 500.

 

[lhuegele]

For security reasons alone you should be disabling local administrator accounts, or at a minimum renaming them. Your IT folks should be using domain admin accounts to access your servers instead of the local admin account.

We give our IT support people 2 accounts actually. One is just a domain user account for normal day-to-day stuff, and they have a seperate domain admin account they use when they need it.

Good luck,

 

[netwalker1]

the problem is that we don't have any secuirty policy to do that - and the funny thing is that this administrator is the local administartor user and it was locked !


Mohamed Farid
[green]Know Me No Pain , No Me Know Pain !!![/green]

 

[pankajmhatre]

Check the dependancies of that account and if no major dependencies rename the account..