restrict local user creation

[swammer]

is there a group policy that will restrict a local admin to create loca users on a workstation?

[allen2]

The only i can think is a local policy with a startup script which will delete/disable disallowed accounts.

[swammer]

I've seen some workstations where I am a local admin and I get an error message after creating the user that the password does not match some requirements. I had a complex password so I assumed it had something to do with restricting creating local users.

[allen2]

Perhaps that was a password requirement as you can set policy to disable "easy" passwords. Run gpedit.msc, go to computer config, windows parameters, security parameters, account policy, password policy. If you set something too complex there you'll have a hard time finding a password matching your settings.