📎 AI Summary:
The thread discusses best practices for managing the default administrator account on Windows 7 PCs within a domain. The original poster asks whether it's advisable to leave the default admin account disabled and create a separate local admin account, and whether the default account can be reactivated if needed. Respondents recommend disabling the default admin account for security reasons and creating a strong, separate local administrator account, confirming that the default account can be re-enabled if necessary. Overall, the advice favors disabling the default account to enhance security while retaining the ability to activate it if required.
S

ScienceJohn

Well-Known Member
Joined
Feb 28, 2012
Messages
4
Thread Author #1
Hi all,

I have a load of Windows 7 laptops/pc's on a domain and wondered if the general feeling was to leave the default administrator acct disabled and create another local admin (although obviously I realise there will be domain admins as well)

It was my understanding that leaving it disabled and not changing the password allows you to activate it should you need to ??

Open to advice

Thanks
 

Solution
T
I would recommend that you keep the default admin account disabled, and that you create a local admin account. (In the event that the domain goes down)

If you are in a live production environment I recommend creating very strong passwords consisting of several uppercase, lowercase, symbols and numbers to ensure the safety of the machines against threats.

If creating a test environment, since security isn't an issue a simply password should be sufficient.

To answer your second question...

"It was my understanding that leaving it disabled and not changing the password allows you to activate it should you need to ??"

Yes leave it disabled.
Sort by date Sort by votes
T

TechGoudy

New Member
Joined
Sep 16, 2011
Messages
32
#2
I would recommend that you keep the default admin account disabled, and that you create a local admin account. (In the event that the domain goes down)

If you are in a live production environment I recommend creating very strong passwords consisting of several uppercase, lowercase, symbols and numbers to ensure the safety of the machines against threats.

If creating a test environment, since security isn't an issue a simply password should be sufficient.

To answer your second question...

"It was my understanding that leaving it disabled and not changing the password allows you to activate it should you need to ??"

Yes leave it disabled.
 

Upvote 1 Downvote
Solution
You must log in or register to reply here.

Similar threads

WindowsForum AI
  • Article Article
Windows 11: Restore Admin Access After Deleting the Only Administrator Account
Replies
0
Views
650
WindowsForum AI
WindowsForum AI
G
  • Solved
Cannot remove Administrastor Group from default Administrator account on Lenovo Windows 10.
Replies
1
Views
1K
WindowsForum AI
WindowsForum AI
Z
  • Solved
Windows 10 Clone programs from Windows "regular user account" to "administrator account".
Replies
14
Views
3K
Neemobeer
Neemobeer
F
  • Solved
Windows 7 Problem with Win 7 Administrator Account and Printisolationhost.exe
Replies
1
Views
2K
WindowsForum AI
WindowsForum AI
T
  • Solved
Windows 7 Windows 7 Default Install Path
Replies
2
Views
2K
tomservo
T