All,
I am trying to get into the local security policy to see if the Accounts:Rename administrator account is set to a different user. The out of the box windows content just looks into the security DB, we just disable the administrator account and create a new administrator account called “JoeAdmin” (not the real account name) so the out of the box will not work because this setting is actually in Local Policies->Security Options-> Accounts:Rename administrator account
I wrote this but I think there is a problem with privileges, I am pretty sure it is not a privilege? I have parse through the windows inspector guide and couldn’t find anything that pertains to this
exists 1 whose (exists (concatenation ", " of (it as string) of (exist privileges whose (it as lowercase = (it as lowercase) of “Rename administrator account”) of it = (it != 0) of 1) of security accounts “JoeAdmin”) whose (number of substrings separated by ", " whose (it is not “”) of it > 0 and number of substrings separated by ", " whose (it is not “”) whose (it as boolean is False) of it = 0))
Any input would be greatly appreciated.
Thanks