Re: Group Policy setting for restricting creation of local user accounts

Right, but I am looking for a group policy, security template, or local
security policy.


KenB wrote:
Restricting the users to non-administrator access will prevent them from
being able to create accounts on the computers.

Ken


"B.E. Jorgenson" <jorgenson.b@xxxxxxxxx> wrote in message
news:1159380582.077768.320930@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Is there a way through group policy to restrict any user from creating
local computer user accounts when the computer is joined to the domain?
This has nothing to do with logon locally but actually creating a local
user account.

Thanks,
Brian


.

Relevant Pages

  • Re: Ive been hacked
    ... I get a screen without any user accounts. ... account cannot open the group policy. ... If I log in safe mode no user ...
    (microsoft.public.windowsxp.help_and_support)
  • Group Policy precedence question
    ... Group Policy precendence is Local Policy, Site, Domain, OU, Sub-OU. ... Can you override the Default Group Policy? ... What is the precedence involving user accounts? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Administrator restricted - Control Panel Missing
    ... If you did not specifically set up Group Policy to restrict access to ... The command net users will display user accounts and net user username will ... type of administrator. ... the control panel was missing. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Deny Log on Locally to some accounts through GPO
    ... Microsoft Windows Operating System Group Policy Result tool v2.0 ... Disable RDP Application Accounts ... Filtering: Not Applied ... This list only includes links in the domain of the GPO. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Deny Log on Locally to some accounts through GPO
    ... accounts reside... ... We also created a GPO named "Disable RDP Application Accounts". ... Microsoft Windows XP Operating System Group Policy Result tool ... Filtering: Not Applied ...
    (microsoft.public.windows.server.active_directory)