Original: security of the local administrator account in Windows

Purpleendurer note:
See: http://techrepublic.com.com/5100-1009_11-5692378.html? Tag = NL. E102

Here, only the specific operations are translated.

Secure the local administrator account in Windows
Security of the local administrator account in Windows

By Michael Mullins ccna, MCP

Takeaway:
Did you know the Windows Local Administrator account is the only access someone needs to completely wreak havoc on your network? Locking down this account can go a long way toward securing your ate systems. Mike Mullins offers some quick ways to better protect the local administrator account.
Do you know that obtaining a local dministrator account in a Windows system is the only opportunity for a person who wants to blow off your network.
Locking this account can make your company's system a big step forward.
Mike mälins' provides some quick methods to better protect the local administrator account.

Secure the Administrator account in the Windows 2000
Administrator Account Security in Windows 2000
 
Windows 2000 doesn' t allow you to disable the administrator account. However, you can take steps to provide almost the same level of security as turning off this account. follow these steps:
In Windows 2000, the Administrator account cannot be disabled. However, you can take some steps to achieve the same effect as disabling this account. Procedure:

Log on either as administrator or as a user with administrator permissions.
Log on with another administrator account or a user account with administrator permissions.

Go to Start | programs | Administrative Tools | Local Security Policy.
Start -- program -- Administrative Tools -- Local Security Policy

In the local security settings console, expand local security ies, and select user rights assignment.
On the Local Security Policy settings console, expand the local policy and select user permission assignment.

Double-click Deny access to this computer from the network.
Double-click to Deny access to this computer from the network

In the Security Policy Setting dialog box, click Add.
In the Security Policy Settings dialog box, click Add.

In the select users or groups dialog box, select the Administrator account, and click Add.
In the Select User or user group dialog box, select the Administrator account and click Add.

Click OK twice, and close the local security settings console.
Click "OK" twice to close the Local Security Policy setting console.

Reboot the machine for the change to take effect.
Restart the computer for the change to take effect

Disable the Administrator account in the Windows XP and Windows Server 2003
Disable the Administrator account in Windows XP and 2003

To disable the local administrator account, follow these steps:
To disable the local administrator account, follow these steps:

Log on either as administrator or as a user with administrator permissions.
Log on with another administrator account or a user account with administrator permissions.

Right-click my computer, and select Manage.
Right-click my computer and choose manage from the pop-up menu.

Expand local users and groups, and select users.
Expand local users and user groups and select users.

Double-click administrator.
Double-click Administrator

Select the account is disabled check box, and click OK.
Select to disable this account selection box and click OK.

Close the Computer Management Console. The change will take effect after you log off the computer.
Final Thoughts
Disable the Computer Management Console.
The change will take effect after cancellation.