Instead you should look to reducing the number of domain administrators in the domain and limiting them to a few trusted users. Auditing will show when passwords are changed on the default administrator account.
HTH
M@
On 8/4/06, Isenhour, Joseph <[EMAIL PROTECTED]> wrote:
What is the general consensus on the use of back up admin accounts?
This is an account that is hidden to most users and has elevated
privileges in the domain. The purpose of the account is to be able to
quickly react to an attack on the Domain Admin accounts either by a
malicious user, or a bug in a process.
The built in Administrator account is a huge target and it's easy to
find even if you rename it. It can't be deleted but the password can be
changed which can cause a lot of trouble. That's why I'm starting to
think about this.
Thanks
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx