we are required by internal policy to rename the local Administrator of windows machines
the same account is user to map roles in RBAC
is there a guideline or a best practice to:
1) massively renaming the account using bladelogic
2) not loosing access due to the previous operation
I think I did this w/ a blpackage that pushed the local security policy entry to rename the admin account, then an external command that ran "echo BLAdmins:BLAdmin rw,map= ??TARGET.WINDIR??/rsc/users.local"
you might want to test that first, I think doing it in the blpackage will keep you from cutting off access.