删除用户时提示无法在内置账户上运行此操作

如果管理员遇到这样的情况的话就需要注意了你的服务器可能被入侵了。

一般黑客都将这种的添加账号的手段称为不死账户

首先我们来了解建立不死账户的方法，

1.黑客其将guest用户放到administratorss组中，当管理administrator登录后删除administratorss组中的guest账户，保存时提示无法在内置账户上运行此操作
(系统自带的账户是不能删除的只能禁用黑客就是利用了guest不能删除的原理)
解决方法：把它隶属管理员组的属性去掉，禁用账户，这样就可以了

2.再另外一台服务器也是2003系统的电脑找到HKEY_LOCAL_MACHINE\SAM\SAM，单击鼠标右键在弹出的子菜单中选择权限 (WIN 2000的操作系统运行regedt32，找到HKEY_LOCAL_MACHINE\SAM\SAM，选择 安全权限)
然后把你现在所使用的用户添加进入，并选择 完全控制，再刷新一下就可以看到SAM下面的项了。然后到guest账号对应的000001F5的项，鼠标右键导出并保存该文件，名字随意。
然后把保持的文件复制到被黑客入侵的的机器上，然后双击导入到注册表。
（然后觉得麻烦也可以，把下面的值直接复制过去保存也可以）

复制代码代码如下:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\Users\000001F5]

"F"=hex:02,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,ff,ff,ff,7f,00,00,00,00,00,00,00,00,\

f5,01,00,00,01,02,00,00,15,02,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,b1,d4,61,f5

"V"=hex:00,00,00,00,b0,00,00,00,02,00,01,00,b0,00,00,00,0a,00,00,00,00,00,00,\

00,bc,00,00,00,00,00,00,00,00,00,00,00,bc,00,00,00,22,00,00,00,00,00,00,00,\

e0,00,00,00,00,00,00,00,00,00,00,00,e0,00,00,00,00,00,00,00,00,00,00,00,e0,\

00,00,00,00,00,00,00,00,00,00,00,e0,00,00,00,00,00,00,00,00,00,00,00,e0,00,\

00,00,00,00,00,00,00,00,00,00,e0,00,00,00,00,00,00,00,00,00,00,00,e0,00,00,\

00,00,00,00,00,00,00,00,00,e0,00,00,00,00,00,00,00,00,00,00,00,e0,00,00,00,\

08,00,00,00,01,00,00,00,e8,00,00,00,04,00,00,00,00,00,00,00,ec,00,00,00,04,\

00,00,00,00,00,00,00,f0,00,00,00,04,00,00,00,00,00,00,00,f4,00,00,00,04,00,\

00,00,00,00,00,00,01,00,14,80,90,00,00,00,a0,00,00,00,14,00,00,00,44,00,00,\

00,02,00,30,00,02,00,00,00,02,c0,14,00,44,00,05,01,01,01,00,00,00,00,00,01,\

00,00,00,00,02,c0,14,00,ff,ff,1f,00,01,01,00,00,00,00,00,05,07,00,00,00,02,\

00,4c,00,03,00,00,00,00,00,14,00,1b,03,02,00,01,01,00,00,00,00,00,01,00,00,\

00,00,00,00,18,00,ff,07,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,\