Account options greyed out

[Guest]

The Built-In administrator account within my domain seems to have its account
options locked out. I found recently that this account has the "Password
Never Expires" option checked, and I want to be able to disable this feature.
When I log in with enterprise admin credentials to modify the account
options, I am still finding them to be greyed out. I have logged in with many
various accounts, and they all produce the same result. I have verified that
these accounts have "full control" within the ACL for the account I wish to
modify. Any thoughts?

 

[ptwilliams]

The Administrator account is special -it cannot be locked out, it cannot be
deleted, and it's password never expires. This is by design. If you don't
like this, I would rename (via GPO) and disable the account and create a new
account called Administrator and configure the account options that you
want.

I don't agree with security through obscurity, but if you feel strongly
about some of the administrators built-in features, this is your best route.


--

Paul Williams

http://www.msresource.net/
http://forums.msresource.net/

The Built-In administrator account within my domain seems to have its
account
options locked out. I found recently that this account has the "Password
Never Expires" option checked, and I want to be able to disable this
feature.
When I log in with enterprise admin credentials to modify the account
options, I am still finding them to be greyed out. I have logged in with
many
various accounts, and they all produce the same result. I have verified that
these accounts have "full control" within the ACL for the account I wish to
modify. Any thoughts?

 

[Ryan Hanisco]

Hi JAF.

Take a look at This article on renaming the Administrator Account:
http://support.microsoft.com/default.aspx?scid=kb;en-us;816109

I consider this standard practice.... You might also want to run the MBSA
tool against your DCs while you are at it. This will show you many of the
common security holes with remediation steps.

http://www.microsoft.com/technet/security/tools/mbsahome.mspx