Re: Administrator gets locked out

From: Herb Martin (news_at_LearnQuick.com)
Date: 12/31/04 

Date: Fri, 31 Dec 2004 01:38:24 -0600

<somebody@compusmart.ab.ca> wrote in message
news:7qs9t09bg0sm91pc83q6bbid0e1b185t0k@4ax.com...
> My understanding is that the built-in administrator account cannot be
> locked out at the console, but can be made to follow lockout policies
> for logon attempts over the network. Is this account in fact locked
> out at the console?

Perhaps he meant network.

It makes no sense (even) to allow lockout from the
console since this could be a denial of service attack
against the admin with no supported way to reset it. 

-- 
Herb Martin
>
> What's the status of the guest account?  It used to be recommended to
> rename the administrator account for increase security (very little
> benefit).
>
> What's the access to the machine?  Could the admin account have been
> renamed to something different and a decoy non-admin account given the
> name of administrator.  In fact, can the guest account be renamed to
> administrator  (and administrator to guest).  Check the status of the
> guest account.
>
> The SIDs will tell which is which.
>
> Roger
>
> "Ed Gregory" <eg@hotmail.com> wrote:
>
> >I have a Win2000 Pro machine that is allowing the administrator account
to
> >be locked out.  I thought that with Win2000, XP, 2003 the administrator
> >account couldn't be locked out.  This comes from MS tech articles.  The
> >user, I guess typed the password incorrect too many times and now we are
> >unable to login with the administrator account.  There are only two
accounts
> >on the system.  Administrator and Guest.
> >
> >How do I unlock or enable the administrator account?  I don't mean I do I
> >recover a password, but how do I disable the account locked out flag that
> >must be set in the user?
> >
> >Thanks.
> >
>

Relevant Pages

  • Re: Basic Authentication + IIS 5 + Windows 2000 + Frontpage 2002 = failure?
    ... administrator account -- we should have no problems at least browsing to ... server. ... | authentication dialog box. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Serious Security & Administrative issue!!!!
    ... capability [including file encryption and a boatload of security policies] to be ... The concept of the built in administrator account is ... if that account is only available in safe mode then hackers can not use it ...
    (microsoft.public.security)
  • RE: [VulnWatch] Blank Administrator password in DELL XP Professional install
    ... default out of the box configuration for any Windows XP Pro, ... this can lead to security ... risks if the administrator disables the account. ... Null Password on Administrator account. ...
    (VulnWatch)
  • Re: Update Error Code 800B0100 P.P.S.
    ... Here is the Direct link for that download for Vista x86 systems ... Administrator account that has full admin rights that could address those Windows updates that are not able to install. ... If the happens to be the built-in Administrator account, then enable it and set a password for it and login with the Administrator account. ...
    (microsoft.public.windows.vista.general)
  • RE: more info on a hopefully unsuccessful compromise
    ... Retina will still work ... accounts, btw, it's the Administrator account, and it belongs). ... has NO PASSWORD, it succeeds, and incorrectly logs the password as valid. ...
    (Incidents)