Reducing the Attack Surface of the Administrator Account

by Derek Melber
Sept. 1, 2017 0 comments TechGenix windows client security

Before we can start to limit the Administrator accounts on your network, it is important to understand where they are and what privileges they have. We will first start by looking at the desktops and servers in your organization. All Windows computers have a local Administrator account configured at installation. This Administrator account is the highest level account that you have on each of these computers. The Administrator account has membership in the local Administrators group, granting the account ultimate control over that computer. There are also Administrator accounts configured in Active Directory. The first domain that is configured in your Active Directory enterprise has a special Administrator account.