Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I keep hearing "bang account" at my company and, through context, figured it out to mean an account with elevated privileges.

I believe this is particularly the case with Active Directory accounts, but I can find very, very few mentions of "bang account", "bang-account" or variations of that term on the internet.

My only context for "bang" is the beginning of shell scripts "hash bang bin bash" for example: #!/bin/bash. I suppose in some ways ! could be shorthand for an "elevated" account.

Could anyone tell me if I'm right, where it comes from (surely it has some etymological meaning), and if it is actually scoped to just AD?

share|improve this question
I've never heard that. "hash-bang" yes. – quadruplebucky Feb 26 '14 at 20:08
Why don't you ask your cow-orkers - surely they'll know. – Iain Feb 26 '14 at 20:11
Why not just ask the person/people using the term? – joeqwerty Feb 26 '14 at 20:29
Another vote for "never heard this usage." – mfinni Feb 26 '14 at 20:48
I Googled "bang account" and got nothing but adult "dating" sites. Certainly nothing to indicate it's a common term as it pertains to Windows user accounts. – HopelessN00b Feb 26 '14 at 20:59
up vote 7 down vote accepted

Google-FU appears to be something on an academic nomenclature level

There are a few others such as:

Sometimes users are given 'elevated' privileges, which might be the ability to change passwords for a group of users, or the ability to administer certain machines.

In the case of a research group, the elevated privileges might be finely tuned permissions to just perform the actions needed on particular userids and/or computers.

In the case of a departmental or faculty computing office resource person, the elevated privilege would have access to the entire portion of the active directory tree that is co-managed by that individual.

These are referred to as BANG accounts, and they take the format of exclamation mark followed by uwuserid. E.g.. !jblow, !j2smith.

Beginning with Windows 2000, the most effective way to elevate a user's capabilities is to leverage permissions of the active directory. We can fine tune the permissions to entirely (but not excessively) cover the actions this elevated user is expected to perform.

The NT 4 style of elevation is to add the user to the local administrators' group, but with Active Directory it is easier to group the stations in to an OU and assign the privilege at the OU level.

And here:

share|improve this answer
I found this same article, but it didn't seem relevant as I can say for certain that no one at my company (<15 years) has any ties to Berkeley or University of Waterloo. These two articles were the ONLY mentions of this term, and I couldn't make any connection to how the term had made the jump to my company. It must be coming from another source? – rockerest Feb 26 '14 at 21:03
There are a few others such as: appears to be something on an academic nomenclature level. – TheCleaner Feb 26 '14 at 21:06
it appears to be something on an academic nomenclature level This is the only connection I can make as the person standardizing this term comes from a university background. – rockerest Feb 26 '14 at 21:09

Some quick googling shows that this comes from some Unix cultures at some universities. Thus, I would say it's not widespread, certainly not a standard, and not usually used with AD.

It refers to the practice of beginning a username (for a privileged account) with a "!", pronounced "bang."

share|improve this answer

So I just ran into this question while searching for an event ID for Win Ser 2008. Just in case any one else is still in question about Bang account. A bang account is merely a way of granting and tracking people that have/need access to certain resources. Since most of these are administrator accounts, A specific Admin might just need rights to access one additional resource that the rest of the admins generally do not need. In this case a specific bang account might be created, just for that user. It also works vice versa if one admin just needs limited/strict permissions, just so there's no risk of potentially causing havoc with the domain.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.