Domain Controller Security Policy

From: Eric Eickhoff (eric_at_sigma_at_nospam.nospam)
Date: 08/12/05

  • Next message: keith: "Re: Granting access based on user location" 
    Date: Fri, 12 Aug 2005 16:31:02 -0500

    Greetings,

    I am stumped as to whether or not this can be resolved, but a client set the
    Rename Administrator Account setting in the Domain Controller Security
    Policy to a name containing the '@' character. Of course now, she can't log
    on to the domain with that account and as luck would have it -- she doesn't
    have any other accounts with domain admin privelages and this is the only
    domain controller. It is a W2K3 DC. Does anyone know if the DC Security
    Policy can be reset -- at least the Rename Admininstrator Account setting (I
    know -- this sounds fishy from a security standpoint and truly don't expect
    an answer on that one) or is there a way to log on to the system using the
    account name with '@' signs in it. I had her try entering
    DOMAIN\@ministrator in the username with no luck. I am assumming that it is
    looking at the information after the '@' sign as being the domain info and
    that is why it is failing. She does have the password for the Active
    Directory Restore Mode if it helps.

    Anyone have any insight?

  • Next message: keith: "Re: Granting access based on user location"

    Relevant Pages

    • Re: GPO errors in application eventlog
      ... The rename administrator account policy was not enabled. ... 1202 - SceCli "Security policies were propagated with warning. ... Check if the "Rename Administrator Account" security policy is enabled. ...
      (microsoft.public.windows.server.sbs)
    • Re: Domain Controller Security Policy
      ... As she has the ADRM password, if she also has backup to ... Microsoft MVP (Windows Security) ... > Rename Administrator Account setting in the Domain Controller Security ... > Directory Restore Mode if it helps. ...
      (microsoft.public.windows.server.security)
    • How to hide administrator name
      ... In order to improve security, it is possible to rename Administrator account ... in an Windows XP system. ... But everytime a user choose "Run as.." ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Microsoft Security & Configuration Tool (MSCT)
      ... > install into the server become problem. ... How to undo the security configuration that I had already applied ... basicsv.inf is the Domain Controller Security Policy, ...
      (microsoft.public.security)
    • Re: Group policy - another newbie question
      ... Domain Controller Security Policy is exactly that. ... > settings you see if you open Active Directory ...
      (microsoft.public.win2000.group_policy)