Accounts: Rename Administrator Account
|ID: oval:gov.nist.usgcb.windowsseven:def:53||Date: (C)2012-04-13 (M)2018-03-06|
|Class: COMPLIANCE||Family: windows|
This security setting determines whether a different account name is associated with the security identifier (SID) for the account Administrator. Renaming the well-known Administrator account makes it slightly more difficult for unauthorized persons to guess this privileged user name and password combination.
An administrator can temporarily override this setting by manually renaming the account, but upon the next application of group policy, Windows will re-rename the account as indicated by this policy provided Group Policys Security policy processing is configured to reapply policies even if they haven't changed. This policy DOES affect the built-in Administrator domain account in Active Directory if the policy is enabled at the root of the domain in Default Domain Policy. It has no affect if enabled in Default Domain Controllers Policy. When applied on domain controllers, and therefore to the domain Administrator account in Active Directory, this setting only changes the pre-Windows 2000 logon name of the account.
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Accounts: Rename administrator account
(2) REG: INFO NOT AVAILABLE
|Microsoft Windows 7|