Link to home
Start Free TrialLog in
Avatar of Crash2100
Crash2100Flag for United States of America

asked on

Remove Administrator from User Accounts control panel

Is there any way I can remove the "Administrator" account from the list in the User Accounts control panel?  I'm trying to keep people with administrator access from messing with the account.  I think the easiest way would be to just remove it from the list in the user accounts control panel.
Avatar of bullshooter5
bullshooter5

Start Button> control panel > user accounts>click on acount to change> select change accounts>

bs5
exactly.
Avatar of Crash2100

ASKER

What are you describing, how to change the account type?  If so, that's not what I'm trying to do.  I want to remove the account titled "Administrator" from the list in the User Accounts control panel.  I don't want it disabled, I just want it so it's not accessible by another user.  Basically, I want to be able to stop another person with administrative access from putting a password on the account, or from changing the password using the User Accounts control panel.
to the best of my knowledge you cannot delete the built in local administrator account.  Since all users in the local administrator's group are equal, anyone with local admin rights can reset the password on the built in admin account. If you dont want someone to to administrative tasks such as this, simply don't give them rights to do so.
I'm not trying to delete the account.  I just want it inaccessible by the computer's main user, so they don't change the password on it or anything.  Because with the user's administrative access, they can change the password without having to know the previous password.  But I still want it enabled in case something happens to their account or a virus infection.  That's why I was wondering if there was a way I could just remove it from the list in the User Accounts control panel.  So I can still get to it in for administration purposes.

I found in Computer Management I can select that the user can't change their own password, but ironically, because of the administrative access, they can still change the other account's password.
if the account exists it will show up in user manager. so if you dont want it to show up then your only option is to delete it. After all, that is what user manager does (shows all accounts).  Like i said earlier, if the user is in the local administrators group, then they will have full control of the local PC. Either the account is an administrator with full rights or it isn't, you can't have it both ways.
If the account will show up if it exists, then how do all these accounts listed in the Users in Computer Management stay out of the User Accounts control panel?  I have a bunch of accounts created by Visual Studio.Net that don't show up in the list.
You could make the local users power users with increased permissions through the local security settings, but so they still can't change the admin password.
ASKER CERTIFIED SOLUTION
Avatar of sramesh2k
sramesh2k
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Crash2100, by user manager i meant the local users and groups MMC. This utility shows all accounts on the machine.  Admins dont use that toy in the control panel, since, as you pointed out, it doesn't show all the accounts.
sramesh2k:  In TweakUI, are you talking about the Logon settings, where you can hide users on the welcome screen?

mikeleebrla:  Knowing that the User Accounts control panel doesn't show all of the accounts existing on the computer, I'd really like to know how those other accounts prevent themselves from being listed in the control panel.
i dont know the answer to that question but it really doesn't matter depending on your definiition of "control panel" since from "control panel" you can access both the basic user accounts tool and the "real" users and groups MMC snap in.  All a user has to do to open the MMC is to go control panel>users>advanced>advanced to open the MMC and see all the accounts.
I'm not concerned about a method of accessing the list that is that sophisticated.  I just want the thing out of the User Accounts control panel.  You can do what you described even easier using the Computer Management program.
sramesh2k:  In TweakUI, are you talking about the Logon settings, where you can hide users on the welcome screen?

Yes, that's the setting I was referring to. BTW, that hides "Administrator" from User Accounts applet as well.
You're right, I can't believe I didn't realize it did that myself.

One last thing, does anyone know of a group or something I could change to a user's account in Computer Management so it stays out of the list by default, like the ASPNET user does.  I'm just curious.