dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts.