Give users the ability to remove admin accounts (whooooof!).

  • Thread starter Thread starter oops_there_it_is
  • Start date Start date
O

oops_there_it_is

Until Microsoft gives users the ability to remove "admin accounts"
from their machines, they will never truly be hardened? I would like
the ability to remove the admin account, I can always restore it from
a backup with the account enabled. Many viruses, scripts, and remote
users cannot function without the "admin account" enabled.

If Microsoft were to remove this lock from the system, I would support
it more vigorously. Small business owners need this kind of power
when they cannot afford to hire IT staff to pore over logs that need
special "viewers".

If I have to write scripts and use special viewers, then should I
start using Linux?
 
The Administrator account is not the problem. Incorrect usage of an account with Administrator privileges is. Unless you need Administrator privileges, don't give the account Admin priviliges. Ensure that you use strong passwords, and that they are changed frequently. Reserve the Administrator account for times when you actually need it.

If you don't use an account with Administrator privileges, then you can't inadvertently launch the script, virus or other malware with Administrator privileges.
 
Your reasoning makes about as much sense as removing "root" from an
*ix OS machine - do you do that too - if so how does it reboot without
booting into recovery mode?
 
Greetings --

Remove the built-in Administrator account? I don't believe I've
heard a stupider idea in at least the last week.

Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH
 
Back
Top