How to pevent a local admin from changing local user accounts?

[Guest]

I there any way to pevent a local administrator from creating or changing local user accounts?

 

[Guest]

Trying not to be too sarcastic here, but................why on earth would you make someone an Admin if you don't want them to have Admin priveleges?? Downgrade their account level, then add rights/permissions as needed on a granular basis perhaps, not sure what you are trying to accomplish here, any more info for us?

 

[Guest]

I'd like to set up a user account which has enough rights to start/stop services. On the other hand, I want to prevent this user to change other users' accounts
Maybe I was wrong... Is it enough to set up a Power User or even a User for this job
I would appreciate any comments

 

[Torgeir Bakken \(MVP\)]

I'd like to set up a user account which has enough rights to start/stop services. On the other hand, I want to prevent this user to change other users' accounts.
Maybe I was wrong... Is it enough to set up a Power User or even a User for this job?
I would appreciate any comments.

Hi

Relevant for WinXP/Win2k3 as well:

HOW TO: Grant Users Rights to Manage Services in Windows 2000
http://support.microsoft.com/?kbid=288129

For method 3 in the article above:

A new, bug-fixed version of SubInACL.exe is available for download here
(Win2k/WinXP/Win2k3):

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b

SETACL (freeware) at http://setacl.sourceforge.net/ can also set permissions
on local or remote Win32 services.