Change Account Login Name for an SBS 2003 AD account.
Posted on 2013-06-03
I have inherited a domain that was setup by a previous admin where a number of user accounts were setup with their login names being simply their first names. The obvious end result is that these accounts are susceptible to directory and other attacks which result in their accounts being routinely locked out. We require the use of strong passwords that are changed frequently, and believe me I hammer this point home. That said it is a nuisance and concerns me despite the strong passwords.
I would like to change the user login names on these accounts to something more secure like first-name. initial#, but I have concerns as to what this will do.
First, if I change the account login name are there any best practices to be observed when making the change?
Second, how can I alter the client account that already exists on the client box so when the user logs in with their new credentials they will load their existing account on the box and still have access and privilege's to their desktop, documents, e-mail etc..
The clients by the way are a mix of XP Pro and Win 7 Pro.