This would be how you would disable the action as a group policy:http://technet.microsoft.com/en-us/library/cc975912.aspx
You'll want to enable the
administrator account before doing this however, so that you are able to turn it back on again (there's a difference between an elevated account with administrative privileges, and the user account within the OS.
To do so, use the follow commands:
net user administrator /active:yes
net user administrator password *
The second command will then prompt you to set a password.