Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How can I prevent one Admin from deleting another Admin??

10 Sep 2013   #1
Gravco

Windows 7 Professional x64
 
 
How can I prevent one Admin from deleting another Admin??

I am setting up a very basic computer for a company, and I have already activated "The Administrator" and created a secondary Administrator. I will need accesss to The Administrator often. So what I am asking; Is there a way to prevent one administrator from deleting the other intentionally or unintentionally? I've set the password on the one I don't want deleted, but I know that is not enough, because the other Admin can still remove it.


My System SpecsSystem Spec
.
10 Sep 2013   #2
Shadowjk

Windows 7 Professional x64 SP1 ; Windows Server 2012 R2 Standard
 
 

Not sure how this is network or sharing related but it should be noted that the built-in Administrator can never be deleted only deactivated. It is strongly advised to only activate it when necessary.

You should only allow users Admin access if you wish them to have full control of that machine. The only possible way I can think of is to restrict access via group policy to that one Administrator so that it cannot change what you don't want it to.

Group Policy - Apply to a Specific User or Group

Please understand that even this isn't perfect and they may be able to bypass it via a command prompt therefore it may be worth restricting access to the command prompt. That being said if you want that much restriction then the account in question should really be a standard user.

Josh
My System SpecsSystem Spec
10 Sep 2013   #3
LMiller7

Windows 7 Pro 64 bit
 
 

Quote:
How can I prevent one Admin from deleting another Admin??
You can't.

Any attempt to restrict what an admin can do is an exercise in futility. Some very limited restrictions are possible but they are nothing more than speedbumps for anyone beyond the novice level. Giving such individuals admin access on a business computer would be asking for trouble.

By design all admin accounts have essentially unrestricted control over the computer. Whatever access they do not have they can grant themselves. Any change made by one admin can be changed by another. All admin accounts are equal. The built in Administrator account is a little different but not relevant to your issue. Any admin can delete, change the password, and make any other changes to any account without knowing the password to that account. All of this is by design.

All users with admin accounts must be trusted to use their powers for good. You have to work out your issues by means of policies known to all admins. They cannot be enforced by any settings on the computer.
My System SpecsSystem Spec
.

10 Sep 2013   #4
Gravco

Windows 7 Professional x64
 
 

Thanks, I had a feeling that was going to be the answer. I'll see what I can do, it's not so much that I want to restrict the other Admin as much as it is i just don't want them to lock me out of the computer.
My System SpecsSystem Spec
10 Sep 2013   #5
Shadowjk

Windows 7 Professional x64 SP1 ; Windows Server 2012 R2 Standard
 
 

I think LMiller7 is correct with a company policy being enforced with appropriate sanctions for this
My System SpecsSystem Spec
Reply

 How can I prevent one Admin from deleting another Admin??




Thread Tools




Similar help and support threads
Thread Forum
How to prevent WET from migrating the admin user
Hi Been trying to migrate a user profile from one computer to another (both W7 Ultimate). Outlook settings don't get copied and the most annoying thing is it copies the admin user by default also which ends up creating a second admin user on the destination computer. I can live without...
General Discussion
How do I prevent all users access to the local Admin's My Documents
Hey everyone, First post here as we are having some issues at my job. We're a small sized school district and we are in the process of currently attempting to create a universal image to roll out across the district. As part of the initial process, we are following a spiceworks directed tutorial...
General Discussion
How to prevent administrator to change super admin's password?
Hi! I have 2 users for now on my pc: Super admin and admin. For some personnal reasons, i want the user admin to have the rights to install software...have more rights.. But I don want admin to be able to change the super administrator's password: is there a way, strategy or something i can do...
General Discussion
How do I prevent UAC from prompting me when running in admin mode
I need to run some programs as administrator such as Visual Studio 2010. So I set it to run as administrator, but because of the user account control settings, I am prompted to allow it to run each time. Is there a way to not see these prompts when running a program, without turning off the...
System Security
How to prevent safe mode login for non-admin account?
Dear All, I have 2 accounts set in my windows 7 PC- admin & standard. Is it possible to prevent safe mode login for the standard a/c? I mean when the standard user will try to enter in safe mode, he/she will be denied access (may be force shutdown or a prompt to enter some password set by me)....
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 15:33.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App