Is there any way to remove a local administrator’s right (XP) to manage accounts? We are running into a situation where it appears the only way out is to give users access to an account with admin privileges on their local machine. However, if we have to do that, I’d like to prevent that specific administrative account (but not all administrators) on the local machine from changing user account properties.