how can i reach the purpose?

perhaps i got an user account with its password and it is in the localgroup administrators

the purpose below:

1.anyone included administrator cannot change its password.but the user itself can do it;

2.the max account in "localgroup administrators" is two.anyone included administrator can not add user into it.

is it a dream?

what we eager to get is to make dreams come true!!!!

You need to be more specific...... What OS are you talking about??? What EXACTLY do you want to do?

the OS is win2k advanced server.

oh i forgot the most important point:we should use the command line.