Windows Server 2003: How do grant a user permission to create user accounts without adding to administrators group?

Question

Simple newbie question I am sure. But I can't seem to find the information anywhere.

How do grant a user permission to create user accounts on the local machine without adding to administrators group?

I am working on a website that is setting up ftp user accounts, and I need to give the Network Service account the ability to create users.

I thought it might be the "Act as part of the operating system" permission in the local security settings, but it does not seem to be working for me.

Any Ideas... Thanks

score 3 · Accepted Answer · answered Dec 17 '09 at 18:14

3

As far as I know, you can't create (or manage) local users without having local administrator rights.

answered Dec 17 '09 at 18:14

Massimo

2

+1 - This jibes w/ my knowledge, too. You're probably better off writing a service program that runs as an Administrator and has an API to accept account creation requests from the less-privileged user to create the accounts on its behalf. You could do this with a fairly simple VBScript running as a service. – Evan Anderson Dec 18 '09 at 14:53

1 Answers1