Details

Accounts: Administrator account status



This security setting determines whether the local Administrator account is enabled or disabled.



Notes



If you try to reenable the Administrator account after it has been disabled, and if the current Administrator password does not meet the password requirements, you cannot reenable the account. In this case, an alternative member of the Administrators group must reset the password on the Administrator account. For information about how to reset a password, see To reset a password.


Disabling the Administrator account can become a maintenance issue under certain circumstances.



Under Safe Mode boot, the disabled Administrator account will only be enabled if the machine is non-domain joined and there are no other local active administrator accounts. If the computer is domain joined the disabled administrator will not be enabled.



Default: Disabled.


Solution

Policy Path: Security Options
Policy Setting Name: Accounts: Administrator account status


Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.


References


Source