Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Simple newbie question I am sure. But I can't seem to find the information anywhere.

How do grant a user permission to create user accounts on the local machine without adding to administrators group?

I am working on a website that is setting up ftp user accounts, and I need to give the Network Service account the ability to create users.

I thought it might be the "Act as part of the operating system" permission in the local security settings, but it does not seem to be working for me.

Any Ideas... Thanks

share|improve this question
add comment

1 Answer

up vote 2 down vote accepted

As far as I know, you can't create (or manage) local users without having local administrator rights.

share|improve this answer
1  
+1 - This jibes w/ my knowledge, too. You're probably better off writing a service program that runs as an Administrator and has an API to accept account creation requests from the less-privileged user to create the accounts on its behalf. You could do this with a fairly simple VBScript running as a service. –  Evan Anderson Dec 18 '09 at 14:53
    
Thanks for the help. This sounds like a good solution. –  Chris Mullins Dec 18 '09 at 17:48
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.