Is it possible to limit the ability to add local accounts, domain accounts and domain global groups to the local Administrator's group? We have a situation where we have a domain global group that is a member of the local administrators group on a Windows 2003 and we want to prevent members of this group from being able to add anyone else to the administrator's group. So far we have not been able to figure out a way to limit this ability because by being in the administrator's group that capability is inherent. If anyone knows how to do this can they please provide me with the "how to" details? Thanks!

Hi, after checking the issue, it seems this is a general Windows server related issue. As this forum focuses on Windows Vista specific issues, this inquiry would best be posted to the following Windows server forum: http://social.technet.microsoft.com/Forums/en-US/category/windowsserver/ The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the newsgroups regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.