Renaming Administrator Account

[kathanon]

Hi, I am looking for some advice on renaming the administrator account on our DC. This is probably a really basic question that I should know, but here goes.

If I go into AD users and computers and rename it to something else, will that affect any other services? I know that when I changed the admin password backup wouldn't run at first, as it was running under that account, will changing the just name have any effecton backup and should I be aware of anything else?

Many thanks in advance for any help received, I appreciate this site so much

Kathy

 

[GSC]

Kathy,
If none of your services are configured to use the "Administrator" account nothing will be affected. But if you have configured a service or software with this account you will run into problems if you rename it.
My approach to this issue would be to first disable the account for a week and wait and see if something wierd happens. If something happens just enable the account.
Also document it and try to change so that this service or software is not dependent on the "Administrator" account.
Do this a couple of times and when the account has been disabled for more than a week without anything wierd happening you are home free.
Hope this helps.
Regards,
GSC

 

[kathanon]

Thanks GSC, I know that the backup is scheduled to run under that account, so disabling it would cause problems. Is there any way to synchronise it so that backup still runs if the account is renamed?

kathy

 

[GSC]

Kathy,

Are you using a 3:rd party software for backup or the WIN2K built in backup software?
If you are using a 3:rd party software you can always create an account that the backup will use.
Just remember to add the newly created account in the necessary groups.
This way you will eliminate the backup problem.
(I have never worked with the WIN2K built in backup so I can't answer any questions regarding that one

GSC

 

[kingofscorpio]

hi gsc,
as per you have suggested kathy to disable and enable administrator account in the forum.
please tell me how do you diable administrator account.

king.

 

[kathanon]

No, we were using Veritas and had an account for that, but this is NTbackup and runs under the administrator account.

I suppose I could try renaming it and see what tries to log on. I could also create another backup job I suppose, but this one is customised and runs from a batch file.

Thanks for the help

kathy

 

[GSC]

Kathy,
I would be very careful before renaming the account. This can cause more problems than it can solve.
I would try the other account first and when you are 110% sure then and only then I would rename the account.
Good Luck.

You are welcome!

GSC

 

[kathanon]

Thanks GSC

Will leave it for now

kathy

 

[Dazzleman]

Hi,

Renaming the Administrator account is no big deal. In fact it is one of Microsoft's first recommendations when tightening up your security.

We rename both Domain Admin accounts and local Admin accounts. Microsoft also recommends that you then create a dummy accounts named Administrator and Domain Admin that you lock down disable and give guest rights to. Those accounts you audit for login attempts.

The things you will have to look out for are services that run using the Administrator account specifically instead of as part of the System.You will need to change the user name and or password.

Once that is done you are good to go.

Jdazell@buckeye-express.com

 

[SupaTech1]

I don't even think you can disable to admin account. Just go into services and it will tell you if any services are logged in under the admin account, one really good way around this type of issue create a Service account (regular account with a name like sa_backup) and have the backup service running with that account, now if you have quite a few DC or servers running major services like exchange be very sure to double check services.

never a good idea to rely on the admin account for anything rename it and leave it alone,

do you have all services in unix running under root?

didn't think so, same concept here, kinda