On Tue, Nov 27, 2012 at 7:02 AM, Michiel van Es <vanesmich...@gmail.com> wrote: > Hi, > > We want to check for hardening and one of our Windows hardening rules is to > rename the Administrator account and create a decoy Administrator account, > not part of any group and disabled. > One of the things we want to check is to see if the Administrator account is > enabled on Windows machines. > > Is there a check of simple script how I can establish this on the Windows > machines? > > Regards, > > Michiel
Does windows have command line tools to check for this? If so, it shouldn't be hard to write a .bat to do the check and output the results. This could be used in a command/full_command block on the agents.
