Link to home
Start Free TrialLog in
Avatar of isprofessionals
isprofessionalsFlag for United States of America

asked on

Changine the Administrator username?? How Safe Is It to rename the Administrator username?

Hi:
  Has anyone encountered any drawbacks to changing the built-in "administrator" username account to a different name?  Yes, we do have additional accounts setup with administrative privileges applied and I realize we can simply add an additional username, assign it admin privileges and call it good but, we are working with a particular client that has a need for increased security and changing the administrator's username to another name is being considered.  Firewall appliances made by Cisco and SonicWall have this capability to change its primary admin account to another name.  Is it safe to do the same with the built-in administrator account or are their known quirks with Microsoft's Active Directory when doing so?  Thank you advance.
ASKER CERTIFIED SOLUTION
Avatar of Lee W, MVP
Lee W, MVP
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of isprofessionals

ASKER

Thanks for the post.  "Services" is my concern as well.  Particularly when they refer to the administrator account to authenticate.  I'm concerned that the name change from "administrator" to "somename" will not propogate properly throughout the server?
have you tried to delete the admin profile
armsteadw,
  Not sure I understand.  Why would I want to delete the admin account?  I only want to change the "administrator" account to something less known w/out leaving the server inaccessible to me or running services and/or anything else the server might need the built-in "administrator" account for.
I'm fairly certain you CANNOT delete the built-in administrator account... but I'm not sure what armsteadw's point is because you CAN rename it.
This is not usually an issue for me since I always rename it when I setup a server.  I don't have a machine (virtual or otherwise) to test it on, but that would be what you do.  (and keep in mind, you can always rename it back).
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thank you all for the positive posts, as I was uncertain as to the "QUIRKS THAT MS is Known for!", particularly where an admin account is concerned.
Avatar of kiachet
kiachet

Hello "isprofessionals",
Thanks for the assist but I think I don't deserve it. I just found out that the "Services" actually DO depend on the username (as in login name). The good news is that all system services by default are started using the "localsystem" account instead of the built-in administrator. So this will only affect you if you've added new services or changed existing "Services" credentials using the built-in administrator.
As for permissions, there will be no impact.
Sorry for the mistake.
Thanks
I think, in addition to kiachet's post, doesn't best practice dictate that you do not use the built-in administrator account for services anyway? Service accounts should be created separately for such purposes.

Flakkman (cause Flakman was already taken)