Preventing local user creation by local administrators
Ok it may be bizarre,
But we would like to prevent our local admin users (in W2K3 domain) to create local users.
How can we do it?
Thank you
But we would like to prevent our local admin users (in W2K3 domain) to create local users.
How can we do it?
Thank you
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
We have to give them local admin as they have to install softwares and do other thing that only a local admin do.
In fact we want a type between poweruser and local admin but it doesn't exist. And we don't know how to do it by giving power users other privileges. It can cost us more to work on it as the requests are various
thank you
In fact we want a type between poweruser and local admin but it doesn't exist. And we don't know how to do it by giving power users other privileges. It can cost us more to work on it as the requests are various
thank you
You can't prevent a member of the Administrators group from creating accounts. All you can do is move the users out of the Administrators group and assign them the specific rights that they require, which may or may not be possible.