Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Simple newbie question I am sure. But I can't seem to find the information anywhere.

How do grant a user permission to create user accounts on the local machine without adding to administrators group?

I am working on a website that is setting up ftp user accounts, and I need to give the Network Service account the ability to create users.

I thought it might be the "Act as part of the operating system" permission in the local security settings, but it does not seem to be working for me.

Any Ideas... Thanks

share|improve this question
up vote 2 down vote accepted

As far as I know, you can't create (or manage) local users without having local administrator rights.

share|improve this answer
+1 - This jibes w/ my knowledge, too. You're probably better off writing a service program that runs as an Administrator and has an API to accept account creation requests from the less-privileged user to create the accounts on its behalf. You could do this with a fairly simple VBScript running as a service. – Evan Anderson Dec 18 '09 at 14:53
Thanks for the help. This sounds like a good solution. – Chris Mullins Dec 18 '09 at 17:48

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.