Deny Control Over Local Admin Account

[Jamie Katz]

On Win2K Pro, what is the easiest way to prevent a user in the
Administrators Group from modifying the local Administrator Account (i.e.
change password, name, rights, etc.)?

Thank you in advance for your kind assistance

Katzman

 

[Steven Umbach]

Ultimately you can not restrict an administrator account if they know how to
change settings to grant themselves their rights. You may be able to try to
restrict a less knowledgeable user. For instance you could try to use Group
Policy via gpedit.msc to restrict all users on the computer from running the
local users and groups mmc snapin. However that still would not stop someone
from using the net user command, etc. --- Steve