perhaps i got an user account with its password and it is in the localgroup administrators

the purpose below:

1.anyone included administrator cannot change its password.but the user itself can do it;

2.the max account in "localgroup administrators" is two.anyone included administrator can not add user into it.

is it a dream?

what we eager to get is to make dreams come true!!!!