Renaming Local Administrator Account



Hopefully this is an easy one for all of you.

I have already renamed the built-in domain administrator account manually,
and have now decided to rename the local administrator account on all of my
desktops throughout the domain. The problem is, when I try and deploy this
via Group Policy my domain administrator account also gets slightly
modified. Basically the 'User Logon Name (Pre-Windows 2000)' field on the
domain admin account properties gets changed to the same name as what I want
for the local administrator accounts. Is this supposed to happen? As I
said, it's just this one field that gets renamed. The rest of the domain
admin account stays the same.


Steve Athanas

Hi, there:

Are you applying this policy at the domain level? Because that's what it
sounds like, which is the only reason I can think that you would have
this problem. Try placing your computers in an OU, if they aren't
already in one, and then applying this policy to that OU, safely away
from your Domain Accounts.

As a good principle of GP management, you should be very timid about
putting any policies directly on the domain, based on the idea that it
will then affect all workstations, member servers, and Domain
Controllers in the entire domain, not to mention all users (such as the
built-in admin account).

Steve Athanas
MCSE:Security (2003)


Thanks for the reply Steve,

This is what I suspected all along. I appreciate the confirmation of that.
So I guess some restructuring is in order.

Thanks again

Steve Athanas

You're welcome.

Take care and have fun re-organizing. :)
Steve Athanas
MCSE: Security (2003)

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question