rename BuiltIn Administrators group
Hi,I was asked by security team to rename the builtIn administrators group. But I can't see any significant reason to do that.Will it increase security?regards
November 13th, 2008 11:33am

Renaming the administrator account (or the builtin administrators group, for that matter) isa classic example of the "Security by obscurity" principle. Its efficacy is widely debated, here's one example:http://technet.microsoft.com/en-us/magazine/cc510319.aspxI suggest you read through the points mentioned by the experts in the article and decide for yourself which path to take. =)Regards,Salvador Manaois IIIC|EH MCSE MCSA MCITP|Server/Enterprise AdminBytes & Badz : http://badzmanaois.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
November 13th, 2008 11:59am

Hi,maybe I didn't describe it corectly. I'm aware about changing local administrator account, but they want additionally to rename local administrators group, and this is what I'm wondering about. Will it increase server security?Regards
November 13th, 2008 12:46pm

To an extent, renaming the administrators group may provide a certain layer of security (through obscurity). For example, a hacker may try to enumerate members of the administrators group and tries to crack or brute-force the password of its members may not be able to do so if the group is renamed (especially if he uses an automated tool that scans hundreds of machines at a time). The inherent flaw, for this example, is that the hacker could then query the builtin administrator account and checks for groups the account is a member of and work from there to identify the renamed administrators group. Regards,Salvador Manaois IIIC|EH MCSE MCSAMCITP | Enterprise/Server Admin Bytes & Badz : http://badzmanaois.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
November 13th, 2008 8:42pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics