Hi,
I wanted to see if there was a permission that I could change (or some other workaround) to restrict an administrative account from being able to change the account type of other users on the same computer? Is there a permission I can set or some other workaround to make this possible? P.S. Can't use local group policy editor because I use Windows 7 Home Premium (x64)
Trying to limit what another admin can do is an exercise in futility. Any and all attempts to do so will fail. By design all admins are equal. Any restriction you might impose another admin can reverse. Any permissions you set can be changed by another admin. All of this, and much more, is by design.
Any problems you are having with other admins you must work out by setting policies known to all concerned.
I understand that the permissions can be set back, but that's not my goal or my concern. I simply want to restrict an administrative account from being able to change the account type of other users on the same computer and I'm not concerned if this admin can change the permission back.
There isn'tI wanted to see if there was a permission that I could change (or some other workaround) to restrict an administrative account from being able to change the account type of other users on the same computer?
Quote