Cisco ISE - disable/rename admin account for GUI

[pgiouvanellis]

Hello All ,

Is there anyone knows how ( if it is possible ) to rename/disable the GUI admin account ? 

As far as the CLI Account i was able to create a new one and then delete the admin account for CLI but as far as 

the GUI admin acoount i did not found any way to accomplished that .

Thank You ,

Palaiologos

[Mark Elsen]

 - You may find some advisories in the thread below usefull : I would stay away from removing the default root account(s) ; rather set a very strong password (and of course remember it...)

 M.

[Mark Elsen]

- Sorry here is the link :

   https://community.cisco.com/t5/wireless-security-and-network/unable-to-log-in-to-prime-gui-3-4/td-p/3714057

 M.

[pgiouvanellis]

The link you provide to me is about Prime not ISE .

Also i have tried in lab enviroment to delete admin gui account but to found any way to perform that .

If someone else manage to find any way please contact .

Thanks ,

Palaiologos

[Greg Gibbs]

The default 'admin' account cannot be disabled or deleted. I was, however, able to rename the account in ISE 2.6 (patch 3).

Best practice is to set a very strong password for the default admin account (optionally, rename it) and store it somewhere safe.

Cheers,

Greg

[pgiouvanellis]

How did you manage to rename the admin account .

Please provide more info .

Thanks.

[Greg Gibbs · Accepted solution]

I connected to the ISE GUI and navigated to Administration > System > Admin Access > Administrators > Admin Users, selected the admin user, clicked Edit, modified the name and clicked Save.

ISE automatically kicked me out of the GUI and showed the following message on the login page.

I was able to login again using the updated admin username and the configuration shows the update.