[dba-Tech] Linked logins to Windows Server 2003

Steve Erbach erbachs at gmail.com
Wed Oct 27 12:03:32 CDT 2010


Jim,

Right, right...I understand that.  But I didn't try to DELETE the
account; I merely disabled it.  Once I did that then one of the other
accounts -- the account for the owner of the business -- went wonky
and he couldn't log in.

What's with the apparent linking between accounts?  Granted, I didn't
get any feedback from other users on the system; that is, nobody else
claimed that they couldn't log in.  It's just that this "base" account
has got its hooks into the business owner's account somehow.  That's
what's got me baffled.

Steve Erbach
Neenah, WI

On Mon, Oct 25, 2010 at 8:35 PM, Jim Lawrence <accessd at shaw.ca> wrote:
> This is one issue with Active directory as far as I know. Once the base
> account is created that can not be removed. The password can be changed but
> the account itself can not be removed unless Active Directory is totally
> removed and then re-installed... One of those Windows security things.
>
> That is according to a server guru friend...I have never ran into that
> specific problem with AD.
>
> Jim
>
>
> -----Original Message-----
> From: dba-tech-bounces at databaseadvisors.com
> [mailto:dba-tech-bounces at databaseadvisors.com] On Behalf Of Steve Erbach
> Sent: Monday, October 25, 2010 4:08 PM
> To: Discussion of Hardware and Software issues
> Subject: Re: [dba-Tech] Linked logins to Windows Server 2003
>
> Jim,
>
> OK...but that doesn't explain the apparent link between the accounts.
> Different user names, different passwords.  But when I try to Disable
> the guru's account, the owner's account can't log in.  Are we talking
> some sort of aliasing here?
>
> I didn't try to delete the account; I just changed the password and
> then I thought I'd Disable it.  I'm content if I can't delete it.
>
> Steve Erbach
>
>
> On Thu, Oct 21, 2010 at 11:02 AM, Jim Lawrence <accessd at shaw.ca> wrote:
>> Hi Steve:
>>
>> The most you can do is change the password of the previous 'person of
>> interest'. You can not delete the account. That is how Active-Directory
>> works...so no one can screw with it. Ultimate security has its price.
>>
>> The only real way to change the account is to re-install. Been there done
>> that.
>>
>> Sorry Steve.
>>
>> Jim




More information about the dba-Tech mailing list