On Windows the default built-in Administrator account must be renamed. Also, the default built-in Guest account must be disabled. See also: Level 2, Level 3, Level 4, SA5, Servers A