在AEM中，可以通过自定义用户创建监听器来防止管理员创建用户。下面是一个示例代码：

首先，创建一个实现EventListener接口的监听器类，例如UserCreationListener：

package com.example.aem.listeners;

import org.apache.jackrabbit.api.security.user.Group;
import org.apache.jackrabbit.api.security.user.User;
import org.apache.sling.api.SlingConstants;
import org.apache.sling.api.resource.ResourceResolver;
import org.apache.sling.api.resource.ResourceResolverFactory;
import org.osgi.service.component.annotations.Component;
import org.osgi.service.event.Event;
import org.osgi.service.event.EventHandler;

import javax.jcr.Node;
import javax.jcr.RepositoryException;
import javax.jcr.Session;
import javax.jcr.Value;
import java.util.Arrays;
import java.util.List;
import java.util.Map;

@Component(immediate = true, service = EventHandler.class, property = {
        "event.topics=" + SlingConstants.TOPIC_RESOURCE_ADDED,
        "event.filter=(" + SlingConstants.PROPERTY_PATH + "=" + "/home/users/*" + ")"
})
public class UserCreationListener implements EventHandler {

    private static final List ADMINISTRATORS = Arrays.asList("admin", "admininstrator");

    private final ResourceResolverFactory resolverFactory;

    public UserCreationListener(ResourceResolverFactory resolverFactory) {
        this.resolverFactory = resolverFactory;
    }

    @Override
    public void handleEvent(Event event) {
        String path = (String) event.getProperty(SlingConstants.PROPERTY_PATH);
        String username = getUsernameFromPath(path);
        if (isAdministrator(username)) {
            try {
                ResourceResolver resourceResolver = getResourceResolver();
                Session session = resourceResolver.adaptTo(Session.class);
                Node userNode = session.getNode(path);
                userNode.remove();
                session.save();
            } catch (RepositoryException e) {
                e.printStackTrace();
            }
        }
    }

    private boolean isAdministrator(String username) {
        return ADMINISTRATORS.contains(username);
    }

    private String getUsernameFromPath(String path) {
        String[] pathParts = path.split("/");
        return pathParts[pathParts.length - 1];
    }

    private ResourceResolver getResourceResolver() {
        ResourceResolver resourceResolver = null;
        try {
            Map authInfo = Collections.singletonMap(ResourceResolverFactory.SUBSERVICE,
                    (Object) "usercreationlistener");
            resourceResolver = resolverFactory.getServiceResourceResolver(authInfo);
        } catch (LoginException e) {
            e.printStackTrace();
        }
        return resourceResolver;
    }
}

然后，在OSGi配置中添加以下配置：

• 名称：com.example.aem.listeners.UserCreationListener
• 位置：/apps/myproject/config/com.example.aem.listeners.UserCreationListener.config
• 内容：

service.pid=com.example.aem.listeners.UserCreationListener
event.topics=org/apache/sling/api/resource/Resource/ADDED
event.filter=(path=/home/users/*)

最后，在pom.xml文件中添加以下依赖项：

    org.osgi
    org.osgi.service.event
    1.5.0
    provided

当管理员在AEM中创建用户时，如果用户名为"admin"或"administrator"，则用户会立即被删除。这样就可以防止管理员创建特定的用户。