Manage Learn to apply best practices and optimize your operations.

Stop clients from creating their own local admin accounts

How can I disable Local Users and Groups in the computer management console to prevent clients from creating their own local admin accounts? Also, how can I disable User Accounts in the control panel? I have Windows XP and 2000 client machines.
One of the simplest ways to do this is to just make sure that all the users in question on the machine have User group accounts only, and not Administrator level accounts. (In Windows XP, this is a 'Limited' account.) The permissions granted to them as a User member will insure that they do not have the ability to create new users. The UI to create new users or groups will still be available, but it will not work (and in the end, that's really what matters!).
This was last published in February 2005

Dig Deeper on Windows Server Virtualization and Microsoft Hyper-V

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.