Re: Administrator gets locked out

From: Herb Martin (news_at_LearnQuick.com)
Date: 12/31/04 

Date: Fri, 31 Dec 2004 01:38:24 -0600

<somebody@compusmart.ab.ca> wrote in message
news:7qs9t09bg0sm91pc83q6bbid0e1b185t0k@4ax.com...
> My understanding is that the built-in administrator account cannot be
> locked out at the console, but can be made to follow lockout policies
> for logon attempts over the network. Is this account in fact locked
> out at the console?

Perhaps he meant network.

It makes no sense (even) to allow lockout from the
console since this could be a denial of service attack
against the admin with no supported way to reset it. 

-- 
Herb Martin
>
> What's the status of the guest account?  It used to be recommended to
> rename the administrator account for increase security (very little
> benefit).
>
> What's the access to the machine?  Could the admin account have been
> renamed to something different and a decoy non-admin account given the
> name of administrator.  In fact, can the guest account be renamed to
> administrator  (and administrator to guest).  Check the status of the
> guest account.
>
> The SIDs will tell which is which.
>
> Roger
>
> "Ed Gregory" <eg@hotmail.com> wrote:
>
> >I have a Win2000 Pro machine that is allowing the administrator account
to
> >be locked out.  I thought that with Win2000, XP, 2003 the administrator
> >account couldn't be locked out.  This comes from MS tech articles.  The
> >user, I guess typed the password incorrect too many times and now we are
> >unable to login with the administrator account.  There are only two
accounts
> >on the system.  Administrator and Guest.
> >
> >How do I unlock or enable the administrator account?  I don't mean I do I
> >recover a password, but how do I disable the account locked out flag that
> >must be set in the user?
> >
> >Thanks.
> >
>

Relevant Pages