I know there is a way to rename the local administrator account using GPO...is there a way to also modify the password to be used by that renamed local administrator account? The IT person here before me has the following two settings:
Accounts: Limit local account us of blank passwords to console logon only: "Enabled"
Accounts: Rename administrator account: "abcd"
To me, this means that if someone knows that we have a policy to rename the local admin account to "abcd" that they could log on locally without a password by signing on as "abcd" (if they were to know about this)
We have a policy that doesn't allow anybody but an administrator to install software to a PC in our group...so this seems like a potential flaw to me.
Start Free Trial
