![]() So disable domain admin and create a new admin account. It makes targeting the admin account be it a local admin or a domain admin very easy. ![]() The administrator SID for the default administrator always ends in -500, guest is 501. Therefore, Microsoft leaves the administrator account disabled and expects you to create a new one. Renaming the account doesn't help, because the SID will stay the same. The built-in administrator account has a specific and well-known security identifier, and some attacks target that particular SID.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |