prevent an administrator from adding users

[William Sanders]

Make a non-admin account for them, and make it a member
of the Power Users group. This has MOST of the rights of
an admin, so they can run any old games, but they
shoudn't be able to add new accounts, and certainly not
admin accounts. To make an account a power user, go to
Control Panel > Administrative Tools > Computer
Management, then open up Local Users and Groups, click on
Users, then double click the account name, click
the "Member of" tab, remove anything already there, then
click Add and type in Power Users, click OK and you're
done.

 

[Roger Abell]

Are you sure about that ?
At a cmd prompt what happens when you enter
net localgroup "Power Users"
It should list out the current membership of the group (empty)
Then to add account Kid use
net localgroup "Power Users" Kid /add
At that point the Kid account will start to show as unknown
account type rather than limited/restricted.

The better solution is to address the issues with the "older games"
so that they can be run as a plain user account (if possible).

 

[Roger Abell]

So right, thanks.
You prompted me to fire up the almost never used
XP Home VMware install - and no such group.