user2 needs to NOT be a member of sudo/admin groups.

BTW, there isn't any "admin account" password. There's a username, usually with a uid of 1000, that was created during installation that is...