I work for large organization with a small web staff…  We are deploying MOSS/3.0 and I want to know if there is a way to modify the WSS Administrator permission level (Full Control) so that an Administrator will have Full Control, EXCEPT, the ability to open/edit a page in a web editor (SP Designer, Visual Studio) or even worse MS Word.   

I tried creating a Power User group that allowed the adding of users but not the ability to open a page in a web editor however, because a Power User has the ability to modify [ALL] users, including their own, all a Power User has to do is simply upgrade themselves from Power User to Full Control.

The only thing I can think of, and have no idea how it would be done, would be to create a Power User group that when adding a user that the default permission group level check box "Full Control" would be grayed out. 

Somehow I find it hard to believe that Microsoft would require companies, with tens of thousands of employees, require their IT department to manage adding all users so that employees with curious inclinations can't open up and edit a SharePoint page in, and have seen this done quite often, Microsoft Word.