I recently renamed my Administrator account. In my Security log of my domain controller, I'm getting event IDs 672, 680, 529. The source of the login is the domain controller itself, so there is something which is still using "Administrator" and not the new account name.
All services which had been using the Administrator account have been updated. How do identify what is causing this, and how do I change it?