Re: Default Administrator lockout

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 02/26/04

  • Next message: Steen Schjellerup: "Re: Record Layout of Windows Security Event log records ?." 
    Date: Wed, 25 Feb 2004 23:48:30 -0700

    "Laura A. Robinson [MVP]" <geekwench@snippit.hotmail.com> wrote in message
    news:MPG.1aa68f89e9fae6559897a1@nn.bloomberg.com...
    > In article <#U2XXVy#DHA.684@tk2msftngp13.phx.gbl>, ravburano@hotmail.com
    > says...
    > > Hi,
    > >
    > > I have got the default administrator account (it is not a renamed
    account or
    > > anything like it, the SID is correct) on a Windows 2003 DC to lock out.
    > > Aanyone else have this at all? Thought it was impossible to do as it is
    a
    > > backdoor.
    > >
    > Not only is it possible (Google for passprop.exe), with Win2K3, you can
    > use group policy to disable the account altogether.
    >
    > Laura

    altogether except for safe mode boots

    Roger

  • Next message: Steen Schjellerup: "Re: Record Layout of Windows Security Event log records ?."

    Relevant Pages

    • Re: Default Administrator lockout
      ... admininstrator account in GPO or used passprop. ... "Roger Abell" wrote in message ... >> use group policy to disable the account altogether. ...
      (microsoft.public.windows.server.security)
    • ASP.NET logged in TS?
      ... I just checking a client's TS sessions, and saw the ASP.NET account had ... ASP.NET account be hosting a TS session for an app (which doesn't make sense ... or should I be concerned that someone set ASP.NET random password to ... something known and is using it as a TS backdoor? ...
      (microsoft.public.windows.terminal_services)