Deny Control Over Local Admin Account

  • Thread starter Thread starter Jamie Katz
  • Start date Start date
J

Jamie Katz

On Win2K Pro, what is the easiest way to prevent a user in the
Administrators Group from modifying the local Administrator Account (i.e.
change password, name, rights, etc.)?

Thank you in advance for your kind assistance

Katzman
 
Ultimately you can not restrict an administrator account if they know how to
change settings to grant themselves their rights. You may be able to try to
restrict a less knowledgeable user. For instance you could try to use Group
Policy via gpedit.msc to restrict all users on the computer from running the
local users and groups mmc snapin. However that still would not stop someone
from using the net user command, etc. --- Steve
 
Back
Top