Question for Mr Gates?

[corturbra]

I think someone started this, but I can't find it using the search.... however I am reading through the 2003 Upgrade white paper and in it I read....

"Rename or Disable the Administrator and Guest accounts in each domain to prevent attacks on your domain"

I know since the days of NT4 we have been advised to disable the guest account, so I have two questions....

1. If I disable the administrator account (sometimes used as the system account, by many installed programs... including microsofts!), how will I obtain the privileges to upgrade?

2. If having an administrator and a guest account puts my domain in danger, why the f**k do they install them as default in the first place?

Its like, have a car that doesn't need a key to start it, but hey, just in case it might get stolen you might not want to use that facility, here have a key....

[craigmodius]

I just rename the Administrator account and set a secure password (as well as having guest disabled)

[emr]

I think someone started this, but I can't find it using the search.... however I am reading through the 2003 Upgrade white paper and in it I read....

"Rename or Disable the Administrator and Guest accounts in each domain to prevent attacks on your domain"

I know since the days of NT4 we have been advised to disable the guest account, so I have two questions....

1. If I disable the administrator account (sometimes used as the system account, by many installed programs... including microsofts!), how will I obtain the privileges to upgrade?

2. If having an administrator and a guest account puts my domain in danger, why the f**k do they install them as default in the first place?

Its like, have a car that doesn't need a key to start it, but hey, just in case it might get stolen you might not want to use that facility, here have a key....

Good points Corturbra,

Personally I always rename the admin and guest account via GP, that way it is the same on every pc in the domain. I guess the admin account has to be created during install for obvious reasons; however why don't they give you the opportunity to rename it there and then?

emr

[corturbra]

Good points Corturbra,

Personally I always rename the admin and guest account via GP, that way it is the same on every pc in the domain. I guess the admin account has to be created during install for obvious reasons; however why don't they give you the opportunity to rename it there and then?

emr

Exactly, if its such a risk then put it in as part of the installation... what is the purpose of the guest account though?

[emr]

Exactly, if its such a risk then put it in as part of the installation... what is the purpose of the guest account though?

For when you have your mates over to stay.

I guess the purpose is to provide a ready-made, limited account for guest users on your domain. For example if a supplier / client / whoever happens to be in your office and wants to check his webmail then he could log onto a spare pc and at least have internet access.

Again, it is daft as it simply becomes another point of entry for hackers etc. as it is so well known.

emr

[corturbra]

For when you have your mates over to stay.

I guess the purpose is to provide a ready-made, limited account for guest users on your domain. For example if a supplier / client / whoever happens to be in your office and wants to check his webmail then he could log onto a spare pc and at least have internet access.

Again, it is daft as it simply becomes another point of entry for hackers etc. as it is so well known.

emr

like the humour for a Monday.

There's just so many daft things as everywhere I support has a 'visitor' account with just internet access, as we don't enable the guest account when we install.... I guess it's one of those philosophical questions like "how can there be sound, if there is no-one to hear it?"