Stop clients from creating their own local admin accounts

Stop clients from creating their own local admin accounts

How can I disable Local Users and Groups in the computer management console to prevent clients from creating their own local admin accounts? Also, how can I disable User Accounts in the control panel? I have Windows XP and 2000 client machines.

    Requires Free Membership to View

    Login

    By submitting your registration information to SearchWindowsServer.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchWindowsServer.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

One of the simplest ways to do this is to just make sure that all the users in question on the machine have User group accounts only, and not Administrator level accounts. (In Windows XP, this is a 'Limited' account.) The permissions granted to them as a User member will insure that they do not have the ability to create new users. The UI to create new users or groups will still be available, but it will not work (and in the end, that's really what matters!).

This was first published in February 2005

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top