Administrator account renamed

[Guest]

I accidently changed the name of my administrator account and have lost
access to my administrator documents. When I try to rename the administrator
account back to the current name I get a message "Account name
'administrator' already exists".
How can I reinstate the original adminidtrator account name ???

 

[Jupiter Jones [MVP]]

Colin;
Just Take Ownership of the documents, #9 on this link:
http://www3.telus.net/dandemar/adsecurity.htm

 

[Guest]

If you have an account with full administrative rights, then you should NEVER
let that account be named "administrator". So it's a good thing your account
got renamed by "accident" by you.
If you've deleted an account, you can never reinstate it (even though u name
it exactly the same it's still a new one with it's own ID) and get access to
same files.
So taking ownership is a good solution.

 

[Steve Clark [MSFT]]

Why is that?

You remember where this came from? Yep, NT 4.0 and the "redbutton" attack.

While many say this is "best practice", I submit it's next to worthless
since "Administrator" account uses one of several "well known SID's". It
doesn't change attack surface at all: it only obscures the target from the
(idiotic) attacker. An intelligent attacker will know what SID to look for
anyway.

So, I'm not saying "give up, all is lost" I'm saying "Maybe your efforts
would be better spent on tasks other than renaming accounts for the sake of
security"....