Preventing local user creation by local administrators

Posted on 2006-05-26
Last Modified: 2010-04-18
Ok it may be bizarre,
But we would like to prevent our local admin users (in W2K3 domain) to create local users.
How can we do it?
Thank you
Question by:TAI-
    LVL 15

    Expert Comment

    Tell them that they'll be fired if they do. ;)

    You can't prevent a member of the Administrators group from creating accounts. All you can do is move the users out of the Administrators group and assign them the specific rights that they require, which may or may not be possible.
    LVL 11

    Accepted Solution

    You cannot modify the local admin account privileges. but may be you can change the password of the Administrator account so that they wouldn't know the password. or remove all the users from administrators group so they will no longer be admins and hence they can't create the user accounts

    Author Comment

    We have to give them local admin as they have to install softwares and do other thing that only a local admin do.
    In fact we want a type between poweruser and local admin but it doesn't exist. And we don't know  how to do it by giving power users other privileges. It can cost us more to work on it as the requests are various
    thank you

    Featured Post

    Find Ransomware Secrets With All-Source Analysis

    Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

    Join & Write a Comment

    I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
    A quick step-by-step overview of installing and configuring Carbonite Server Backup.
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now