Administrator not administrator

I am currently setting up a new SBS 2000 box remotely
before I deploy it on our current SBS 2000 Domain. The
new SBS 2000 box is identical in it;s functionality, but
it has the all important RAID5 redundancy and has a better
spec.

I have installed SBS 2000, and I am now patching up the
whole machine using Windows Update. I will also run SP1a
for SBS 2000.

What I want to do now is make the Administrator user not
Administrator, but to set up a new user that will be
Administrator. This is for security, as I know that a lot
of people do this, as Administrator as a Username is 50%
of the way of cracking the password anyway.

How is this done? Do I make a new user in AD on the new
SBS and assign the same "Member Of" components to this
user and then disable the user "Administrator"? I can
then log the server on as this new Administrator knowing
that the Username is not Administrator.

Am I going along the right tracks...I need advice!!

Thanks.

Richard
Thu Oct 23 12:57:01 CDT 2003

One way is to rename the existing administrator account. Then create a new
AD user account with the name "Administrator" with as little authority as
possible.

Richard

"skc" <anonymous@discussions.microsoft.com> wrote in message
news:000501c3997f$c48df5c0$a401280a@phx.gbl...
> I am currently setting up a new SBS 2000 box remotely
> before I deploy it on our current SBS 2000 Domain. The
> new SBS 2000 box is identical in it;s functionality, but
> it has the all important RAID5 redundancy and has a better
> spec.
>
> I have installed SBS 2000, and I am now patching up the
> whole machine using Windows Update. I will also run SP1a
> for SBS 2000.
>
> What I want to do now is make the Administrator user not
> Administrator, but to set up a new user that will be
> Administrator. This is for security, as I know that a lot
> of people do this, as Administrator as a Username is 50%
> of the way of cracking the password anyway.
>
> How is this done? Do I make a new user in AD on the new
> SBS and assign the same "Member Of" components to this
> user and then disable the user "Administrator"? I can
> then log the server on as this new Administrator knowing
> that the Username is not Administrator.
>
> Am I going along the right tracks...I need advice!!
>
> Thanks.

Mark
Thu Oct 23 14:29:37 CDT 2003

just rename the administrator account, you just removed the 50% of the
equation....just don't mnake it admin, super, etc...

--
Sincerely,
Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
www.MCSE2000.com
www.AppLauncher.com



"skc" <anonymous@discussions.microsoft.com> wrote in message
news:000501c3997f$c48df5c0$a401280a@phx.gbl...
> I am currently setting up a new SBS 2000 box remotely
> before I deploy it on our current SBS 2000 Domain. The
> new SBS 2000 box is identical in it;s functionality, but
> it has the all important RAID5 redundancy and has a better
> spec.
>
> I have installed SBS 2000, and I am now patching up the
> whole machine using Windows Update. I will also run SP1a
> for SBS 2000.
>
> What I want to do now is make the Administrator user not
> Administrator, but to set up a new user that will be
> Administrator. This is for security, as I know that a lot
> of people do this, as Administrator as a Username is 50%
> of the way of cracking the password anyway.
>
> How is this done? Do I make a new user in AD on the new
> SBS and assign the same "Member Of" components to this
> user and then disable the user "Administrator"? I can
> then log the server on as this new Administrator knowing
> that the Username is not Administrator.
>
> Am I going along the right tracks...I need advice!!
>
> Thanks.

skc
Fri Oct 24 04:53:49 CDT 2003

how do i do all of this?

Do I simply r-click Administrator in AD>Rename?

Do I then log off and them on again as this renamed user?

I tried the above, logged off Administrator and logged in
as the new renamed one, and I could not get in.
Surprisingly I logged on as Administrator and got back in
again.

I am doing something wrong here!

>-----Original Message-----
>One way is to rename the existing administrator account.
Then create a new
>AD user account with the name "Administrator" with as
little authority as
>possible.
>
>Richard
>
>"skc" <anonymous@discussions.microsoft.com> wrote in
message
>news:000501c3997f$c48df5c0$a401280a@phx.gbl...
>> I am currently setting up a new SBS 2000 box remotely
>> before I deploy it on our current SBS 2000 Domain. The
>> new SBS 2000 box is identical in it;s functionality, but
>> it has the all important RAID5 redundancy and has a
better
>> spec.
>>
>> I have installed SBS 2000, and I am now patching up the
>> whole machine using Windows Update. I will also run
SP1a
>> for SBS 2000.
>>
>> What I want to do now is make the Administrator user not
>> Administrator, but to set up a new user that will be
>> Administrator. This is for security, as I know that a
lot
>> of people do this, as Administrator as a Username is 50%
>> of the way of cracking the password anyway.
>>
>> How is this done? Do I make a new user in AD on the new
>> SBS and assign the same "Member Of" components to this
>> user and then disable the user "Administrator"? I can
>> then log the server on as this new Administrator knowing
>> that the Username is not Administrator.
>>
>> Am I going along the right tracks...I need advice!!
>>
>> Thanks.
>
>
>.
>

Richard
Fri Oct 24 08:25:40 CDT 2003

It sounds like you may have just changed the display name and not the
account name. Look at the properties of the "Administrator" account under
the "Account" tab and make sure you change the user logon name And the
display name.

Richard

"skc" <anonymous@discussions.microsoft.com> wrote in message
news:0b6401c39a14$b9307550$a101280a@phx.gbl...
> how do i do all of this?
>
> Do I simply r-click Administrator in AD>Rename?
>
> Do I then log off and them on again as this renamed user?
>
> I tried the above, logged off Administrator and logged in
> as the new renamed one, and I could not get in.
> Surprisingly I logged on as Administrator and got back in
> again.
>
> I am doing something wrong here!
>
> >-----Original Message-----
> >One way is to rename the existing administrator account.
> Then create a new
> >AD user account with the name "Administrator" with as
> little authority as
> >possible.
> >
> >Richard
> >
> >"skc" <anonymous@discussions.microsoft.com> wrote in
> message
> >news:000501c3997f$c48df5c0$a401280a@phx.gbl...
> >> I am currently setting up a new SBS 2000 box remotely
> >> before I deploy it on our current SBS 2000 Domain. The
> >> new SBS 2000 box is identical in it;s functionality, but
> >> it has the all important RAID5 redundancy and has a
> better
> >> spec.
> >>
> >> I have installed SBS 2000, and I am now patching up the
> >> whole machine using Windows Update. I will also run
> SP1a
> >> for SBS 2000.
> >>
> >> What I want to do now is make the Administrator user not
> >> Administrator, but to set up a new user that will be
> >> Administrator. This is for security, as I know that a
> lot
> >> of people do this, as Administrator as a Username is 50%
> >> of the way of cracking the password anyway.
> >>
> >> How is this done? Do I make a new user in AD on the new
> >> SBS and assign the same "Member Of" components to this
> >> user and then disable the user "Administrator"? I can
> >> then log the server on as this new Administrator knowing
> >> that the Username is not Administrator.
> >>
> >> Am I going along the right tracks...I need advice!!
> >>
> >> Thanks.
> >
> >
> >.
> >

skc
Fri Oct 24 08:30:22 CDT 2003

mark,

read my reply to the other guy...I need help!! how do i
rename it properly?

skc


>-----Original Message-----
>just rename the administrator account, you just removed
the 50% of the
>equation....just don't mnake it admin, super, etc...
>
>--
>Sincerely,
>Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I
4&2000
>www.MCSE2000.com
>www.AppLauncher.com
>
>
>
>"skc" <anonymous@discussions.microsoft.com> wrote in
message
>news:000501c3997f$c48df5c0$a401280a@phx.gbl...
>> I am currently setting up a new SBS 2000 box remotely
>> before I deploy it on our current SBS 2000 Domain. The
>> new SBS 2000 box is identical in it;s functionality, but
>> it has the all important RAID5 redundancy and has a
better
>> spec.
>>
>> I have installed SBS 2000, and I am now patching up the
>> whole machine using Windows Update. I will also run
SP1a
>> for SBS 2000.
>>
>> What I want to do now is make the Administrator user not
>> Administrator, but to set up a new user that will be
>> Administrator. This is for security, as I know that a
lot
>> of people do this, as Administrator as a Username is 50%
>> of the way of cracking the password anyway.
>>
>> How is this done? Do I make a new user in AD on the new
>> SBS and assign the same "Member Of" components to this
>> user and then disable the user "Administrator"? I can
>> then log the server on as this new Administrator knowing
>> that the Username is not Administrator.
>>
>> Am I going along the right tracks...I need advice!!
>>
>> Thanks.
>
>
>.
>