Neowin.net

Want to add users in Windows XP and NOT be a power user or an admin? :P Here's how to and the fix that Microsoft have came up with!

When a member of the Users group tries to use the Users and Passwords tool in Control Panel in Windows XP, the user is prompted for the Administrator password:

You must be a member of the Administrators group on the computer to open the Users and Passwords control panel. You are logged in as Machine_nameUser_name, which is not a member of the Administrators group.

However, the Administrator account and password are ignored if the user runs the Administrative Tools tool in Control Panel. The user can gain access to the Computer Management tool and the Local Users and Groups subtree it contains. When the user gains access, a member of the Users group can add a new user to the computer.

The user can also change the password for the created account. Members of the Users group cannot promote the new user to the Administrators group, nor can they change another account's password.

Click the ...Read More link to see the solution from Microsoft!

News source: Microsoft: Q310753 - Users Group Member Can Add New Users in Windows XP

---

This behavior is the default configuration in Windows XP. To disable this functionality, revoke the "NT AuthorityAuthenticated Users" security principal from the Power Users group:

Log on to the Windows-based computer using an account with administrator rights.

Click Start, and then click Control Panel.
Double-click Administrative Tools, and then double-click Computer Management.
Double-click Local Users and Groups, and then click the Groups folder.
In the right pane, double-click Power Users.
Click NT AUTHORTYINTERACTIVE, and then click Remove.
Click OK.