Renaming the Default Administrator Account

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2, Windows Server 2008, Windows Server 2008 R2

This procedure eliminates any information that can alert attackers that this account has elevated privileges. Although an attacker would still need the password, hiding the default Administrator account by renaming it adds an additional layer of protection against password attacks seeking elevation of privilege.

Requirements

• Credentials: Domain Admins

• Tools: Active Directory Users and Computers

1. Log on with Domain Admins credentials, and then open Active Directory Users and Computers.

2. In the console tree, click Users.

3. By default, the Administrator account is in the Users container. However, if you have already created a Service Admin subtree, the Administrator account might have been moved to the Users and Groups OU in the new subtree.

4. In the details pane, right-click Administrator, and then click Rename.

5. Type a fictitious account name, and then press ENTER.

6. In the Rename User dialog box, change the Full name, First name, Last name, Display name, User logon name, and User logon name (pre-Windows 2000) values to match the new account name, and then click OK.

7. In the details pane, right-click the renamed account object, and then click Properties.

8. On the General tab, change the Description to resemble other user accounts.

9. On the Account tab, change Account options if needed.