Re: Admin vs. Admin Equiv

From: Alaa Abdelhalim [MSFT] (alaa_at_online.microsoft.com)
Date: 06/10/03 

Date: Mon, 9 Jun 2003 16:05:07 -0700

The accounts that belong to the Administrators group have virtually all the
default rights granted to the Administrator account.
However, the Administrator account is still regarded as a special account
that enjoys a few additional features. The most common type is protection
features designed to prevent administrators from being denied access to
their box.
Examples include:
1. You cannot remove Administrator from the Administrators group or delete
it.
2. If you disable the Administrator account you can still log on with it in
Safe Mode.

Thank you 

-- 
Alaa Abdelhalim [MSFT]
-----
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
"Steven L Umbach" <n9rou@attbi.com> wrote in message
news:5ALDa.31223$d51.77928@sccrnsc01...
>        I don't really think there is any difference as far as rights.
> Computers have a "local administrator group" of which the administrator is
a
> permanent member of,  can not be removed or deleted, and has a fixed
> identifier number. Other users can be added to the local administrators
> group and have the same powers, however they can be removed from the group
> (possibly maliciously) or have their accounts deleted.  In a W2K domain,
the
> "administrator" of the first domain controller is also the EFS Recovery
> Agent. The Schema and Enterprise administrators also have powers above a
> normal administrator in a W2K forest.--- Steve
>
>
>
> "Reynold McGuire" <rmcguire@suffolk.edu> wrote in message
> news:0ced01c32b59$b1a17ca0$a601280a@phx.gbl...
> > I wanted to know what the major difference is between the
> > built in "Administrator" account and the Admin Equiv
> > accounts. I thought I remembered some specific tasks and
> > operations that only the 'administrator' could do... so
> > the question would be: what is the major difference
> > between the 'administrator' account and administrator
> > equiv. accounts...
> >
> > Does any one have any ideas? Please reply to me at
> > rmcguire@suffolk.edu if possible.
> >
> > Thanks!
> > - Reynold
> >
>
>

Relevant Pages

  • Re: Remote desktop: cannot copy files why still not working
    ... I created a new user on the XP box, set as an administrator ... this new user account is local to the XP system, ... In my environment, when I do an RDP connection to a server, I first log ... member of the local administrators group on the server. ...
    (microsoft.public.windows.server.security)
  • Re: Remote desktop: cannot copy files why still not working
    ... this new user account is local to the XP system, and a member of the local administrator's group on that workstation. ... In my environment, when I do an RDP connection to a server, I first log on to the xp workstation using my regular, non-privileged domain account, run mstsc, and then logon to the server using a domain account that is a member of the local administrators group on the server. ... In addition, I frequently use runas to run privileged applications on the workstation using my "administrator" account, and have found that files cannot be copied between those applications and anything running under the credentials of my regular account - even though my administrator account actually does have full access to everything on the workstation - just not through my regular account's view of that workstation. ...
    (microsoft.public.windows.server.security)
  • Re: Windows Service - Event Log
    ... I didn't say the Administrator account. ... Administrators group on the local machine." ... I didn't advocate using a member of the Administrator's group; ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... policy to rename the account although it is not really necessary or useful. ... Did I check Group Policies for references to the Administrator ... Failed to perform redirection of folder Desktop. ...
    (microsoft.public.windows.server.general)
  • Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... one referencing the original administrator account: ... specific policy setting that was flagged with a big, ... I used an incorrect procedure to rename the ...
    (microsoft.public.windows.server.general)