We have a network of 750 workstations in a high school in
Wisconsin. We need to run legacy applications and
therefore need the XP logon to be a PowerUser. While the
administrator account set up the AHS user account as a
PowerUser we have discovered that the AHS account can then
remove themselves from the PowerUser group. It makes
sense that they can remove accounts they have created from
groups but it's quite a problem that they can remove their
own account from PowerUser and User even though
administrator created their account. Has anyone found a
way to solve this?