restrict local user creation

[swammer]

what is the policy to restrict local user creation?

thanks.

 

[fattony]

other than not allowing the user to be part of the domain or enterprise admin / local admin group?

 

[swammer]

yes, I've seen some workstations where I am a local admin and I get an error message after creating the user that the password does not match some requirements. I had a complex password so I assumed it had something to do with restricting creating local users.

 

[fattony]

...no i think you just need to supply passwords that meet the complexity requirements