Re: Admin lockout bug?

From: karl [x y] (jamescagney90210@excite.com)
Date: 08/09/02


From: "karl [x y]" <jamescagney90210@excite.com>
Date: Fri, 9 Aug 2002 07:26:34 -0400


Are there any services that are set to start using this disabled
administrator ID? Any drive mappings in Windows or in a login script on a
computer somewhere using the ID? Any scripts or batch files or scheduled
tasks?

"Sheila" <sheila_espanol@hotmail.com> wrote in message
news:uPPiwA2PCHA.212@tkmsftngp11...
> Using computer management, under users and groups, I right clicked on the
> built-in Administrator account and changed the properties. I checked the
> disable account option. It has a red X on it now so I assume that I've
> successfully disabled it... but then again, instead of saying that the
> account is disabled, the error log shows that it's locked out...
>
> Anyway, I created a new admin account as a replacement. It has a diff.
> username.
>
> btw, this is just Win2K pro for a multiuser desktop, not a network.
>
> Thanks!
>
> "Dave Sayers [MS]" <dsayers@online.microsoft.com> wrote in message
> news:#H2487tPCHA.2512@tkmsftngp12...
> > Could you clarify this for us please, as it's not possible to disable
the
> > builtin Administrator account...
> >
> > --
> > --
> > Regards,
> >
> > Dave
> > --
> > Dave Sayers [MS]
> >
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >
> > Please do not send email directly to this alias. This alias is for
> newsgroup
> > purposes only.
> >
> >
> > "Sheila" <sheila_espanol@hotmail.com> wrote in message
> > news:Oqmn9htPCHA.2572@tkmsftngp08...
> > > I disabled the default "Administrator" account and created another one
> > with
> > > a different name. Since then, I get failure logs from the Security
logs
> > > every couple of minutes.
> > >
> > > Sometimes the user NT AUTHORITY\SYSTEM would try to log on but would
> > > obviously fail because of "unknown username or bad password" or
because
> > > "Account locked out".
> > >
> > > I read in some newsgroup post somewhere that it's a bug in win2k that
> will
> > > be fixed in SP3...
> > >
> > > Is this really a bug or are these security attacks already?
> > >
> > > If it is a bug, does the SP3 really fix this?
> > >
> > >
> > >
> > >
> > >
> > > ---
> > > Outgoing mail is certified Virus Free.
> > > Checked by AVG anti-virus system (http://www.grisoft.com).
> > > Version: 6.0.381 / Virus Database: 214 - Release Date: 8/2/2002
> > >
> > >
> >
> >
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.381 / Virus Database: 214 - Release Date: 8/2/2002
>
>



Relevant Pages

  • Re: Explorers menus
    ... Administrator account is listed in the Administrator group and Network ... gave Admin rights to while in Manage and see if your Administrator account ... >>> Outgoing mail is certified Virus Free. ...
    (microsoft.public.windowsxp.help_and_support)
  • Switches for Cmd files
    ... I am pushing an AT Scheduler job to use an administrator ... account through the login script. ... The script executes but the dialog box comes up that shows ...
    (microsoft.public.win2000.cmdprompt.admin)
  • Re: Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... policy to rename the account although it is not really necessary or useful. ... Did I check Group Policies for references to the Administrator ... Failed to perform redirection of folder Desktop. ...
    (microsoft.public.windows.server.general)
  • Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... one referencing the original administrator account: ... specific policy setting that was flagged with a big, ... I used an incorrect procedure to rename the ...
    (microsoft.public.windows.server.general)
  • Re: Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... Did you check the Group Policies for references to the Administrator ... Administrator account? ... what policy do you have? ... referencing the former administrator account. ...
    (microsoft.public.windows.server.general)