<div>
This MS link describes the process in a 2003 domain but maybe applicable to newer.<br><a href="https://docs.microsoft.com/en-us/troubleshoot/windows-server/windows-security/rename-administrator-and-guest-account#:~:text=then%20click%20Properties.-,Click%20the%20Group%20Policy%20tab%2C%20click%20the%20Group%20Policy%20object,click%20Accounts%3A%20Rename%20administrator%20account." rel="ugc">https://docs.microsoft.com/en-us/troubleshoot/windows-server/windows-security/rename-administrator-and-guest-account#:~:text=then%20click%20Properties.-,Click%20the%20Group%20Policy%20tab%2C%20click%20the%20Group%20Policy%20object,click%20Accounts%3A%20Rename%20administrator%20account.</a><br><br>
</div>


JosephEstrada

Technology and Business Process Advisor

Lee W, MVP

<div>
Now that you have heard why it is not very secure, the answer is yes. The setting is still there in Group Policy. However, do not do this at the domain level. It can have unintended consequences. Put your member servers and PCs in their own OU(s) and apply the policy there. Computer configuration| Policies | Windows Settings | Security Settings | Local Policies | Security Options. Both options are there.<br>&nbsp; If you set it and then want to revert, you have to use Group Policy to change it back.<br><br>This being said, obfuscation is seldom very effective but can be used with other security options.
</div>


<div>
This doesn't make sense to me. &nbsp;Use LAPS. &nbsp;<a href="https://www.microsoft.com/en-us/download/details.aspx?id=46899" rel="ugc">https://www.microsoft.com/en-us/download/details.aspx?id=46899</a><br><br>OR disable the local admin account on all systems and create a new one with the name you want.
</div>


<div>
<div class="content wysiwyg-content fr-view">
I would like to replace the local administrator accounts on all PCs on our domain via Group Policy if possible.<br>Currently the local admin account is something like "User" and like Admin or Administrator is one of the first to be targeted by brute force attacks etc..<br>I'd like to change to a nondescript name such as "@dmi#istra$or"<br>Can this change on local PC's be accomplished via domain group policy?<br>Thanks Experts
</div>
</div>



I would like to replace the local administrator accounts on all PCs on our domain via Group Policy if possible.
Currently the local admin account is something like "User" and like Admin or Administrator is one of the first to be targeted by brute force attacks etc..
I'd like to change to a nondescript name such as "@dmi#istra$or"
Can this change on local PC's be accomplished via domain group policy?
Thanks Experts

Rename the local administrator account on all domain PCs

local user

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

server 2019

A personal computer is a general-purpose computer whose size, capabilities and price make it useful for individuals, and is intended to be operated directly by an end-user with no intervening computer time-sharing models that allowed systems to be used by many people, usually at the same time. Personal computers may be connected to a local area network (LAN), either by a cable or a wireless connection, and through that to the Internet. A personal computer may be a laptop computer or a desktop computer running an operating system such as Windows, Linux or Macintosh OS.