5.4. Task 5.4: Securing the Default User Accounts
During the installation of a Server 2003 or XP operating system, two user accounts are created by default: the Local Administrator and the Guest account. These accounts live in the local accounts database (LAD) and remain there on XP, member servers, and stand-alone servers.
As you DCPromo a server to create a new domain and become a domain controller, the LAD is replaced with the AD database on that system. All accounts in the LAD are destroyed. Two default domain accounts are created for this new domain and they live in AD. These are the Administrator for the domain, and the Guest account for the domain.
In addition to the AD database, a new LAD is created for Directory Services Restore Mode ...