|Platform: win2012r2||Date: (C)2015-10-08 (M)2018-03-24|
Accounts: Rename administrator account
The built-in local administrator account is a well-known account name that attackers will target. Microsoft recommends to choose another name for this account, and to avoid names that denote administrative or elevated access accounts. Be sure to also change the default description for the local administrator (through the Computer Management console).
Note This policy setting is not configured in the baseline, nor does Microsoft suggest a user name for the account. Suggested user names are omitted to ensure that organizations that implement this guidance will not use the same new user name in their environments.
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options!Accounts: Rename administrator account
(2) WMI: ###