Renaming Local Administrator Account

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi, there:

Are you applying this policy at the domain level? Because that's what it
sounds like, which is the only reason I can think that you would have
this problem. Try placing your computers in an OU, if they aren't
already in one, and then applying this policy to that OU, safely away
from your Domain Accounts.

As a good principle of GP management, you should be very timid about
putting any policies directly on the domain, based on the idea that it
will then affect all workstations, member servers, and Domain
Controllers in the entire domain, not to mention all users (such as the
built-in admin account).

HTH
__________________
Steve Athanas
MCSE:Security (2003)

Tekmazter wrote:

>Hopefully this is an easy one for all of you.
>
>I have already renamed the built-in domain administrator account manually,
>and have now decided to rename the local administrator account on all of my
>desktops throughout the domain. The problem is, when I try and deploy this
>via Group Policy my domain administrator account also gets slightly
>modified. Basically the 'User Logon Name (Pre-Windows 2000)' field on the
>domain admin account properties gets changed to the same name as what I want
>for the local administrator accounts. Is this supposed to happen? As I
>said, it's just this one field that gets renamed. The rest of the domain
>admin account stays the same.
>
>Thoughts?
>
>
>
>

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Thanks for the reply Steve,

This is what I suspected all along. I appreciate the confirmation of that.
So I guess some restructuring is in order.

Thanks again


"Steve Athanas" <steveNOSPAMathanas@NOSPAMTHANKSgmail.com> wrote in message
news yZXN5LMFHA.1172@TK2MSFTNGP12.phx.gbl...
> Hi, there:
>
> Are you applying this policy at the domain level? Because that's what it
> sounds like, which is the only reason I can think that you would have this
> problem. Try placing your computers in an OU, if they aren't already in
> one, and then applying this policy to that OU, safely away from your
> Domain Accounts.
>
> As a good principle of GP management, you should be very timid about
> putting any policies directly on the domain, based on the idea that it
> will then affect all workstations, member servers, and Domain Controllers
> in the entire domain, not to mention all users (such as the built-in admin
> account).
>
> HTH
> __________________
> Steve Athanas
> MCSE:Security (2003)
>
> Tekmazter wrote:
>
>>Hopefully this is an easy one for all of you.
>>
>>I have already renamed the built-in domain administrator account manually,
>>and have now decided to rename the local administrator account on all of
>>my desktops throughout the domain. The problem is, when I try and deploy
>>this via Group Policy my domain administrator account also gets slightly
>>modified. Basically the 'User Logon Name (Pre-Windows 2000)' field on the
>>domain admin account properties gets changed to the same name as what I
>>want for the local administrator accounts. Is this supposed to happen?
>>As I said, it's just this one field that gets renamed. The rest of the
>>domain admin account stays the same.
>>
>>Thoughts?
>>
>>

Archived from groups: microsoft.public.win2000.group_policy (More info?)

You're welcome.

Take care and have fun re-organizing. :-)
___________________
Steve Athanas
MCSE: Security (2003)

Tekmazter wrote:

>Thanks for the reply Steve,
>
>This is what I suspected all along. I appreciate the confirmation of that.
>So I guess some restructuring is in order.
>
>Thanks again
>
>
>"Steve Athanas" <steveNOSPAMathanas@NOSPAMTHANKSgmail.com> wrote in message
>news yZXN5LMFHA.1172@TK2MSFTNGP12.phx.gbl...
>
>
>>Hi, there:
>>
>>Are you applying this policy at the domain level? Because that's what it
>>sounds like, which is the only reason I can think that you would have this
>>problem. Try placing your computers in an OU, if they aren't already in
>>one, and then applying this policy to that OU, safely away from your
>>Domain Accounts.
>>
>>As a good principle of GP management, you should be very timid about
>>putting any policies directly on the domain, based on the idea that it
>>will then affect all workstations, member servers, and Domain Controllers
>>in the entire domain, not to mention all users (such as the built-in admin
>>account).
>>
>>HTH
>>__________________
>>Steve Athanas
>>MCSE:Security (2003)
>>
>>Tekmazter wrote:
>>
>>
>>
>>>Hopefully this is an easy one for all of you.
>>>
>>>I have already renamed the built-in domain administrator account manually,
>>>and have now decided to rename the local administrator account on all of
>>>my desktops throughout the domain. The problem is, when I try and deploy
>>>this via Group Policy my domain administrator account also gets slightly
>>>modified. Basically the 'User Logon Name (Pre-Windows 2000)' field on the
>>>domain admin account properties gets changed to the same name as what I
>>>want for the local administrator accounts. Is this supposed to happen?
>>>As I said, it's just this one field that gets renamed. The rest of the
>>>domain admin account stays the same.
>>>
>>>Thoughts?
>>>
>>>
>>>
>>>
>
>
>
>