Administrator password change

  • Thread starter Thread starter Jason Cole
  • Start date Start date
J

Jason Cole

I have a user who can log in as himself with admin privs
and change the administrator password, but when he logs
in as the administrator he cannot change the password. A
message says the admin account is locked out. However,
he is logged in as the administrator. How can this be
and what can be done about it?
 
The real administrator account can not be locked out to interactive logon.
It may be a decoy account renamed to administrator. The administrator
account can be configured in account poperties to not allow password change,
however the administrator could change that if he wanted to. --- Steve
 
There is a difference between having an account with admin privileges and
the built-in admin account, which is what he is trying to access when he
tries to log in as Administrator.

It appears that someone has tried to log in as Administrator and failed to
do so locking out the account. Just reset the account. You should check
your security logs to see how long the account has been locked out--failed
logins in the Security logs. Look to see if the attempted logins were done
during normal days/hours during which admins use this account. If not,
someone has tried to access this account that shouldn't have been there.
Many times failed logons are indicators of attempts to compromise your
systems.
 
Back
Top