Prohibit password change

Hey everyone,

So I’ve been trying to figure out if there is a way to prohibit domain admins from changing the password or account settings on individual accounts. I have a few dummy accounts I use to run services, network scanning to SMB and to protect various files.

I have a few domain admins that change student passwords and such. However, I sometimes worry that their careless clicking and or curiosity could lead them to disabling or changing one of these accounts.

So.. is there a way in windows 2k3 to do this? I haven’t had much luck with delegation but if that’s the only way then I’ll have to learn.

Thanks!