Page 1 of 1 1
Topic Options
#136989 - 2005-04-01 09:00 PM Delete Microsoft Support Account
New Mexico Mark Offline
Hey THIS is FUN
****

Registered: 2002-01-03
Posts: 223
Loc: Columbia, SC
This should be pretty basic, but I wanted to see if anyone else had any suggestions.

Microsoft creates a support account when installing Windows 2003. We delete that account as part of the server build steps. I'd like to script the deletion. We don't use AD since most of our servers go into DMZ's and are not domain members.

Deleting an account is easy. However, the account name suggests (and I haven't looked enough times to confirm) that the name is partly a random string. I'm wondering if it has a consistent portion of the SID (like the administrator account) that would allow for easy identification. Or maybe there is a better approach altogether.

Any suggestions?

Thanks,

NMM

Top
#136990 - 2005-04-01 09:03 PM Re: Delete Microsoft Support Account
Shawn Administrator Offline
Administrator
*****

Registered: 1999-08-13
Posts: 8611
Cant check myself, but are there any other uniquely identifying properties ? What is in the description field for this account ?

-Shawn

Top
#136991 - 2005-04-01 10:01 PM Re: Delete Microsoft Support Account
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
Full Name: CN=Microsoft Corporation,L=Redmond,S=Washington,C=US
Description: This is a vendor's account for the Help and Support Service

Account is disabled by default.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#136992 - 2005-04-01 10:06 PM Re: Delete Microsoft Support Account
Shawn Administrator Offline
Administrator
*****

Registered: 1999-08-13
Posts: 8611
Cool, than maybe something like this:

Code:

break on

$computer = getobject("WinNT://@WKSTA,computer")

if $computer

$computer.filter = "user", ""

for each $user in $computer

if $user.description = "This is a vendor's account for the Help and Support Service"

?"Found account " + $user.name

; delete/disable it !

endif

next

endif

exit 0



-Shawn

Top
#136993 - 2005-04-01 10:51 PM Re: Delete Microsoft Support Account
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
good old NT-provider
_________________________
!

download KiXnet

Top
#136994 - 2005-04-03 04:52 AM Re: Delete Microsoft Support Account
New Mexico Mark Offline
Hey THIS is FUN
****

Registered: 2002-01-03
Posts: 223
Loc: Columbia, SC
I hadn't even thought about trying to tie this in to the description. Good idea! Thank you.

NMM

Top
Page 1 of 1 1


Moderator:  Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 2220 anonymous users online.
Newest Members
Viginette, ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder
17888 Registered Users

Generated in 0.06 seconds in which 0.031 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org