[1boredguy]

Hello,

I set up a new domain admin and want to carefully remove the built-in admin.

I tried to disable it, so I can see if anything goes wrong, but I can't disable it because of what a pop-up error says, "can't disable built-in accounts."

Any recommendations on the best way/steps to clean out domain administrator accounts?




Thanks

[fizban2]

i wouldn't go so far as to remove the account (actually i am not sure you even can) if you want it to be secure rename the admin account to something else and disable the account

[1boredguy]

fizban2, on Jun 7 2006, 01:09 PM, said:

i wouldn't go so far as to remove the account (actually i am not sure you even can) if you want it to be secure rename the admin account to something else and disable the account

i renamed it. but i'm not allowed to disable it, or remove it from the domain admin group.

[fizban2]

disable it through GPO, there is an option there to do it

[oioldman]

though if your going to rename and disable it, i would recommend you create a duplicate with different name so you can stuff do admin tasks, unless you have another admin account created

[fizban2]

LOL,
hopefully there is another domain admin account already setup (i hope...)