PASSPROP.exe

[paulhthomas]

Hi guys, as part of a security audit, we've been asked to enable that the administrator account.
I've found that you can do this with

passprop /adminlockout

But my question is does this enable lockout for the administrator domain account, or the local administrator account?

Also, do I need to run this on every server or just the once on say the pdc for example?

Thanks

Paul

Paul Thomas
N+, MCP, MCSA: Messaging, MCSE 2003

Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Passed
70-294 - Passed
70-284 - Passed
70-297 - Passed

 

[paulhthomas]

hi again! ignore the aboev post, it applies to local administrator accounts.

HOWEVER....

Will this tool still work if we have renamed the local admin account using group policy?ie, does the tool look for the "administrator" account, or does it do it by sid as all local admin accounts start and end with the same figures?

Thanks

Paul

Paul Thomas
N+, MCP, MCSA: Messaging, MCSE 2003

Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Passed
70-294 - Passed
70-284 - Passed
70-297 - Passed