We are using xp sp 3 in windows 2003 domain and users are part of the administrators group on local machine. But user control mmc is access by using following command(control userpasswords2) and they can change the local administrator password.How can we disable this command in domain users login.1 person needs an answerI do too

Within the Group Policy Editor, go to "User Configuration>Administrative Templates>Windows Components>Microsoft Management Console" if you click on that one, you will see "Restrict Users to the explictly permitted list of snap-ins". within there define the particular ones that you want to allow the users to have acces to and use, the rest will be unavailable to themDennis ,, Owner: Please dont forget to mark any post(s) that helped as helpful or answered EMAIL ME:: PERSONAL EMAIL :: BUSINESS EMAIL

Hi, Thanks for your replay.Please define which settings helps to disabling the command (control userpasswords2).