If I can remove built-in account from built-in Administrators Group?

Backgroud:
       Someone created a win2003 AD environment, and I upgraded it to win2008r2 AD recently.There is a bulit-in administrator account named domainsvrusr. Unfortunately, the account revealed to some users. Due to security
reason, I want to recover the permission and just let the domainsvrusr account have a domain user permission. And I also need to keep the account have a local-admin permission.
Plan:
        I added domainsvrusr to local administrators group on every servers(For 2008, use the GPO; For 2003, manually added). I want to achieve this goal by removing it from the Built-Admin group. However, I find
it is impossible due to this account is a built-in account.
Question:
        1、If there is any possiblity to achieve this goal by just removed the account out of the group? ( I find some info that says it will not be possible... really?)
        2、The client-server must use the domainsvrusr account. I also consider to rename the default domainsvrusr acoout, and then create a new one. But I think the client-server will also point to the renamed account.
I think it will not be useful... Are there any other alternatives can achieve this goal?
          Thanks all !

I agree with Mahdi. You can't delete a built-in account. Just rename it and change the password.
If you need to use that same account name, after you rename the built-in account and change the password, create a regular domain user account for local admins, and follow what Mahdi suggested to use Restricted Groups.
* If you want more info on how to use Restricted Groups, read the discussion in the following link:
Good discussion about Restricted Groups with a complete step by step:
Technet thread: "AD Question, Group as Administrator?" 3/13/2012 - Read the step by step I posted:
http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/880ad98a-f6bd-4132-ac8b-441d721e2762/
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.

Similar Messages

How can i remove my icloud account from my sons ipad?

can i remove my icloud account from my sons ipad? I just discovered he is getting all of my text messages on his ipad!

You can, but that isn't why he's getting your text messages. That's being caused by using the same Apple ID for iMessage. Have him go to Settings>Messages>Send & Receive, tap the ID, sign out, then sign back in with a different ID. To avoid getting each other's FaceTime calls, have him do the same thing in Settings>FaceTime.
Note: you can still share the same ID for other services such as your iTunes store account even though you are using different IDs for iMessage and FaceTime.

How do I remove an email account from iPhoto on an iMac? I set it up with the incorrect password and can no longer send photos, please help!

"Removing email account from iPhoto"
How do I remove an email account from iPhoto on an iMac? I set it up with the incorrect password and can no longer send photos, please help!

To follow Larry's advice, select your email account in the list of accounts and click the "-" button to remove the account:

I can't remove my iCloud account from my Mac

I can't remove my iCloud account from my Mac, an error shows up saying "iCloud Mail couldn’t be disabled from the iCloud Preference Pane."
I have tried adding new iCloud accounts and those cannot be removed either.

I'd wait a while. A number of people have complained about this and I suspect Apple will find a way to remove them (such as by removing them automatically after a certain period of inactivity).
You can help influence this by providing your feedback here: http://www.apple.com/feedback/icloud.html.

How can I remove an iTunes account from a computer I'm giving away?

How do I remove my iTunes account from a computer that I am giving to a student in my school? I want the music I purchased to play, but I don't want the student to have access to my email address or my credit card that is tied to "my account". I went through the steps to deauthorize a computer but encountered two problems: 1) The only command offered was "deauthorize all". There was no list of the authorized computers where I could check a box to select the one to deauthorize. 2) If I want to leave the music with the computer, but remove the authorization.

If you are giving the computer away you should not include music you've purchased: the purchase doesn't include the right to make copies to give to other people, which is what you would in effect be doing. The same applies to any purchased sofrtware which wasn't bundled with the computer when new.
The proper procedure when selling or giving a computer is to erase it completely and restore it to its out-of-the-box condition from the original disks. You should also make sure to include the disks which came with the computer.

How can i remove my icloud account from my pc?

i'm trying to remove my icloud account from my pc because my iphone is on service and they asked me to do that . Please help.

Go to the Control Panel then click Sign Out.

How can i move my account from canada to USA

how can i move my account from canada to USA

Go to your account information.
Change your address to your U.S address.
Input your U.S credit card.

I tried to update the App that I purchased but the message told me that my Apple account is not valid for use outside of US and I must switch back to US store to able to do it. How can I switch the account from foreign countries back to US?

I tried to update the App that I purchased but the message told me that my Apple account is not valid for use outside of US and I must switch back to US store to able to do it. How can I switch the account from foreign countries back to US?

On your phone (from http://support.apple.com/kb/ht1311):
Change your iTunes Store country
Sign in to the account for the iTunes Store region you'd like to use. Tap Settings > iTunes & App Stores > Apple ID: > View Apple ID > Country/Region.
Follow the onscreen process to change your region, agree to the terms and conditions for the region if necessary, and then change your billing information.

When I set up my iPhone, I accidentally put in an apple ID that doesn't exist. Therefor, I don't know the password and can't delete my account from iCloud. Can anybody help?

When I set up my iPhone, I accidentally put in an apple ID that doesn't exist. Therefor, I don't know the password and can't delete my account from iCloud. I was trying to sync my contacts to my iPad and now it's not possible without iCloud on my phone. Can anybody help?

Have you tried changing the admin password in System Preferences > Users & Groups > Password ??
The Apple ID that is associated with your admin password is noted there.
message edited by: cs

How do I remove my email account from MBA? I am giving it to another to use.

How do I remove my email account from MacBook Air? I am giving it to another to use.

Are you giving it away temporarily or permanently?
If temporarily, you could delete the email account or remove the account's saved password and uncheck the account's enable this account option.
If permanently, you should create a new user account for the new owner, then delete your user account. You may also have to reinstall the version of OSX that was originally licensed to the Mac and remove any applicable applications that are not transferable.

How we can remove one authorization object from multiplt roles

How we can remove one authorization object from multiplt roles

> Correct me if I am wrong !!
O.K., Here I go
> But if the object is maintained in SU24 and if you use Expert mode for generation of the role then again those objects may be pulled.(make sure you never use expert mode once you delete the objects)
Actually using expert mode and choosing 'edit old status' is the only way to avoid objects being 'pulled in' after menu changes.
> As jurjen said, you may download the tables and instead of deleting the object from the excel sheet, change the value of the object in column "DELETED" = X, by doing this only the objects get inactivated(but remain in PFCG).
I am not speaking of downloading tables but about downloading roles from PFCG. This will not get you a spreadsheet but a flat textfile. If you whish to set the object status to deleted you'll have to swap the space on position 207, right behind the 'U, S, G' flag, with an 'X' for all corresponding lines.
Jurjen

Can't access hotmail account from browser. cerficiate untrusted

Can't access hotmail account from browsing, I tried to log into my hotmail account by visiting www.live.com and log into my account (add e-mail address and password) when sign in i get a message saying:There was a problem establishing asecure connection.( I get two tabs Details and Stop) I click on Detials I get another message saying: server Certificate Error. untrusted certificate,unable to determine the certificate origin, This has been disallowed by your administrator.. When i press on option Stop i get e message saying: refussing connection.This server has beed previously supporting HTTP Strict Transport Security. Due to SSL certificate warning/errors, a connection will not be made. Please could anybody help me.. I contact Vodafone they said it's microsoft issue then the latter said it's blackberry problem. i have tried everything nothing seems to work.. I don't want to register my hotmail account on my BB, but i want to access it through browsing as i do on my PC.. I will be really gratful.. thank you
Solved!
Go to Solution.

Ggggrrrr, i really hope that's wrong, i would also be moving away from BB sharpish if that's the case. Hoping someone cleverer than me can come up with a solution, the BB manual certainly doesn't help. Like the first poster I have tried getting vodafone to help and also hotmail, both without success.

How do I remove iCloud mail accounts from my iPad.

Hello. I want to remove 2 mail accounts from my iPad.
The accounts are located on the following path.
Settings- iCloud- Account- Advanced- Mail
The mail account appears here and I want to delete it.

sign out of icloud at setting>icloud>delete account and it will be gone

How do you remove an existing account from an Ipad that is trying to be activated.

How do you remove an existing account from an Ipad that is trying to be activated??

The previous user should have done this.
What to do before selling or giving away your iPhone, iPad, or iPod touch
http://support.apple.com/kb/HT5661
Activation Lock: Removing a device from a previous owner’s account
http://support.apple.com/kb/TS4515
Where did you get the iPad - from a friend, eBay, other?
 Cheers, Tom

Can I access my account from the Skype for Android...

Is it possible to access my account (e.g. change details of Skype to Go numbers) from within the Skype app or do I need to open a browser session to do this ?

Yes.
You can sign into your account from any computer with itunes.
Your library will not be there, but you can use your account.

HT201320 I have two email accounts. However, the iPad automatically uses the account that I only want to use for business. How can I change the account from which mail is sent and received?

I have two email accounts. However, the iPad automatically uses the account that I only want to use for business. How can I change the account from which mail is sent and received?

You are most welcome

If I can remove built-in account from built-in Administrators Group?

Similar Messages

Maybe you are looking for