WIN2K, admin group restriction

[alainb]

I have about 50 clients in my group that need to have their accounts in the administrator group.

What I need to do is leave them all their rights except, the rights to change the administrator's password.

Anybody know a way to do this?

 

[SgtJarrow]

First and foremost.....WHY!!!!!!!

You do not, I repeat, DO NOT, want that many individuals in your admin group......

Instead, create a new group, give it the appropriate rights, and then assign them to that group. Even if the group is almost identical to the admin group, don't put them in the true admin group.... Please remember to give helpful posts the stars they deserve!
This makes the post more visible to others in need!

Robert L. Johnson III, A+, Network+, MCP
Access Developer/Programmer
robert.l.johnson.iii@citigroup.com

 

[alainb]

I agree with you.

But I have a client base of around 2000.

These 50 people are my programmers, they develop internal application, some time they need to play with the environment settings to test or properly write their apps.

Going to their machines every time to change one little thing is getting quite time consuming.

I have not been able to provide them with the complete access they require for this (I was not allowed to apply active directory, management decision).

All admin accounts are local only (management decision).
User accounts are also local.

Any other ideas?