Preventing Users from Creating Local User Accounts

Written by on Sunday, March 2, 2008 1:54 - 0 Comments

By default, any user on computer can create a local user account. Let’s fix that.

In Windows 2000 or XP any user who logs on to a computer has rights to create a basic local user account on that machine. Although these created users will only be in the users group and not power users or administrators of the machine, this is still something that should not be happening on a regular basis as it can create security loopholes in your workstations.

To remedy this situation you can right click on my computer, select manage, and browse to the groups section under the local users and groups heading. Double clicking the users group should display all of its members. You will notice in this group that NT AUTORITY/INTERACTIVE is a member. Selecting this account and clicking remove will remove it from the group and prevent users from creating other local user accounts. ')}

Article written by

Leave a Reply

You must be logged in to post a comment.

2003 server - Sep 30, 2008 22:34 - 0 Comments

instant messaging srv records

More In Computers & PC

Microsoft Outlook - Mar 22, 2009 11:22 - 0 Comments

Outlook: Duplicates in Mailbox

More In Computers & PC