Should I keep the OEM's default account?
Since a few days I've a new laptop running Ubuntu Linux. During the installation I had to create my own user account. After rebooting, I saw, that the manufacture created a second user called oem (original equipment manufacturer) which has admin rights.
Is there any reason to keep the second account since I'm using only my own.
TL;DR Yes, delete the OEM account.
Before you delete the OEM account, check if you are in the sudo
group
groups
Sample output:
% groups
a_user_name daemon adm cdrom sudo dip plugdev fuse lpadmin sambashare docker sbuild
-
If you are in the
sudo
group, remove the OEM accountsudo userdel --remove --selinux-user oem
-
If not, follow these steps
-
Boot into the GRUB menu
Press and hold the left Shift key during boot.
-
Start the recovery mode
Select the entry recovery mode
-
Open the root console
Select the entry root
-
Remount the root partition
mount -o rw,remount /
-
Add your user in the group
sudo
usermod -a -G sudo <your_user>
-
Continue the boot process
Press Ctrl+C
-
For security reasons, I suggest you delete the OEM's account and change the root password. You can delete the OEM's account with sudo userdel accountlogin
and change the root password with sudo passwd
To consider the possibility that the OEM may have enabled the root account, perhaps a better alternative is to disable the root account altogether with sudo passwd -ld root
More info here