What is the difference between local built-in administrator & created

[libroos]

Hi all,

For Windows 2000 SP4 Server that has been newly set up, what is the difference between the local built-in administrator Vs another new account say, "Server\svr-admin" which is added into administrators security group?

What is the difference between the "administrator" account of the Domain Controller Vs a newly created admin account say "Domain\domain-adm". The "Domain\domain-adm" is added into the Domain Admins group.

Pls advise. Thks.

Rgds,
libroos

 

[markdmac]

Nothing is different as long as you join the same groups.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[DanMIS]

Also, the built-in account cannot be locked out by invalid logon attemps. Small difference.

CCA Citrix 4.0
MCP 2003
70-290 Passed
70-291 Passed

 

[libroos]

Thanks Mark and Dan.

For the built-in account, I remembered that there's a registry tweak to allow account invalid logon attempts for the built-in administrators account.

Pls kindly confirm. thks.

 

[markdmac]

yes, there is a registry setting if you WANT the admin account to be able to be locked out though I would not advise it.

Some useful information:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/bpactlck.mspx

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.