ROOT ACCOUNT DELETION

[NAYABRASOOL]

Hello Folks,

We have an audit in couple of weeks , now my people asked me to remove all GENERIC ACCOUNTS on filers , i see i have generic account ROOT in my filer , do i need to remove this to meet the audit requirements else i have to rename it ?? please advise me asap.

Thanks,

Nayab

[aborzenkov · Accepted solution]

You can’t really delete, but in recent Data ONTAP versions you can disable it.

[NAYABRASOOL]

OK, tell me how i can disable it else my aim is here to rename it to some other name is that possible to rename it to " sadmin " ???

[NAYABRASOOL]

And also advise if this effects any service running under ROOT account ??

[aborzenkov]

See “Data ONTAP 8.1 System Administration Guide for 7-Mode”, specifically “Root access to the storage system”

[NAYABRASOOL]

Ours is Ontap 7.3 is the same as above applies to our version as well

[aborzenkov]

Yes.

[NAYABRASOOL]

Hey i have found it how to disable root

FAS01> options security.passwd.rootaccess.enable off

but is there any way how to rename it from ' ROOT'  to ' SADMIN ' Please Advise.

[NAYABRASOOL]

We should not rename it as most of the process runs under root if we rename it , it will crash the filer