Focus on Microsoft
Administrator in Domain Admins group Jan 31 2011 03:58PM
Shang Tsung (shangtsung71 gmail com)
After an audit, I noticed that in the Domain Admins group of our
domain, there is an account named Administrator. As my engineers told
me, this account is created by default when you create a new domain
and cannot be deleted or disabled. Is this true? I am not convinced

We do not like general purpose accounts like this because we lose
accountability. I am pretty sure the password of that account is in
the hands of people who are not supposed to have it. Each domain admin
has his own account who is in the Domain Admins group, so there is no
need for this Administrator account.

Can we delete it? And if yes, what would be the consequences?

Shang Tsung

[ reply ]


Privacy Statement
Copyright 2010, SecurityFocus