Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

A Quick Question : One of our Production machine admin account has been expired. Do we need to reset its password after we enable this account?

share|improve this question

1 Answer 1

You'll be prompted to change an expired password next time you log in with the account.

If it's the default Administrator account and it's currently disabled, just leave it disabled - (if you must use local admin accounts) you should be using a local admin account that's been renamed, to make it harder for an attacker to guess or brute force their way into admin access on your machine.

share|improve this answer
1  
"you should be using a local admin account that's been renamed" - I've never seen this before. Surely that's the definition of security through obscurity? –  Dan Aug 8 '12 at 7:31
    
@Dan If you define that phrase broadly enough, maybe. But in that instance, aren't passwords the definition of "security through obscurity" as well? Every script kiddie and lame script in the world is going to try to guess the "Administrator" password, which won't do them any good if you rename it to Kwijybo, or what have you. –  HopelessN00b Aug 8 '12 at 12:05
    
@Dan, renaming the local Administrator (and even the domain Administrator) account has been standard practice (and I believe is MS best practice) for a very long time. –  joeqwerty Aug 8 '12 at 12:41
    
To be fair, while it's been standard practice since longer than I've been in the industry, the only official mention of being an MS best practice I could find is a fairly recent Technet article about the SBS product line. –  HopelessN00b Aug 8 '12 at 13:25

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.