![]() So disable domain admin and create a new admin account. It makes targeting the admin account be it a local admin or a domain admin very easy. The administrator SID for the default administrator always ends in -500, guest is 501. Therefore, Microsoft leaves the administrator account disabled and expects you to create a new one. ![]() ![]() Renaming the account doesn't help, because the SID will stay the same. The built-in administrator account has a specific and well-known security identifier, and some attacks target that particular SID. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |