how to stop users amending win2k local user table

From: Scott (scottscotland@yahoo.com)
Date: 11/29/02 

From: "Scott" <scottscotland@yahoo.com>
Date: Fri, 29 Nov 2002 15:32:51 -0000

Hi,

I admin a network for a software engineer. Most users require admin access
to win2k pro machines. This means they can tinker with most aspects of the
system.

I need to prevent them amending local users names and groups assignments.

Most of the software used is VB and DOS based.

If i cant prevent this can I at least import local users, passwords at
domain login from the logon script ? this way any changes are overwritten.

Im getting very frustrated about this.

Thanks
Scott.