A. Typically you can’t lock out the Administrator account. However, you can use the Microsoft Windows 2000 Resource Kit utility passprop.exe to lock out the Administrator account via network access and prohibit the possibility of a password brute force attack. However, an administrator can still log on locally at the server. To enable Administrator lockout, enter the following command at a command prompt:

C:\> passprop /adminlockout