Re: administrator

From: Miha Pihler [MVP] (mihap-news_at_atlantis.si)
Date: 10/18/05 

Date: Tue, 18 Oct 2005 21:00:16 +0200

No, but I can say that this is not a bad policy -- especially if you have
time to prepare for it.

Identify all the services on all servers or client computers that might run
under this account and start running them under another account -- account
that is not member of domain administrators group if possible (give account
only permissions that it needs to run that service - least privilege).

Using a Least-Privileged User Account
http://www.microsoft.com/technet/security/secnews/articles/lpuseacc.mspx

After you do this, you shouldn't have any problems changing Administrator
password regularly. 

-- 
Mike
Microsoft MVP - Windows Security
"frank" <frank@discussions.microsoft.com> wrote in message 
news:73590776-C4CF-45A7-AF5D-653FBB483ACF@microsoft.com...
> Our company had a recent audit and part of the report explain the
> administrator accounts needs to renamed and set to change password
> I have renamed but I am hesitating on uncheck never change password is 
> there
> a link which show why/why not it should be set at never change password
>
>
> Thanks for the help
>

Relevant Pages

  • Re: Cannot see Change Password for other users
    ... Created a whole new account, assigned it as an Administrator, and still no ... I've created a global security group in the AD called WSSAdmins. ... Site Users and pick any user the Change Password link is no there. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Wierd permissions on user accounts
    ... That said, as I mentioned earlier, your permissions are bad. ... *nobody* will be able to change password on the account. ... I have the following deny rules.. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Wierd permissions on user accounts
    ... If you put in DENY EVERYONE change password, then nobody will ever be able ... > created account and the permissions on that same account after using the ...
    (microsoft.public.windows.server.active_directory)
  • Re: microsoft xp unable to log on
    ... enable your Administrator account: ... In the user account type administrator, ... specific user and select change password. ...
    (microsoft.public.windowsxp.accessibility)
  • Re: user name
    ... In the user account type administrator, ... You likely didn't create a password for this hidden account ... You'll have an option to log on as Administrator. ... specific user and select change password. ...
    (microsoft.public.windowsxp.accessibility)
Quantcast