Latest Entries

Group Policy Extensions in Windows Vista and Windows Server 2008, Part 2

Thursday, September 20th, 2007

One of the major security weaknesses of previous Windows operating systems has always been the existence of a local administrator account on workstations. While Windows Vista does make use of a local Administrator account, the Accounts: Administrator Account Status policy setting can be used to disable it. By default, the administrator account is enabled, but disabling it is simple. All you have to do is set this policy setting to Disabled.

Before you start disabling local administrator accounts though, there are some consequences that you need to be aware of. If you have disabled the administrator account, you will not be able to re-enable it again unless the local administrator account’s password meets the minimum password length and complexity requirements. Another administrator can reset the account’s password assuming that such an account exists. Group Policy Extensions in Windows Vista and Windows Server 2008, Part 2

Popular Posts

Comments are closed.


Please read our Disclaimer