Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


Remove Domain Admin

Posted on 2007-03-29
Medium Priority
Last Modified: 2010-03-05

I need to remove Domain Admins from all the machines in my Domain.How can i do it.Please suggest me the easiest way i can perform this on 1,500 machines.

Question by:bsharath
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
LVL 96

Expert Comment

by:Lee W, MVP
ID: 18821524
I have to ask why?  I mean, doing this is going to create SERIOUS management problems for you... at least it would for me...
LVL 11

Author Comment

ID: 18821543
I know but
When we add a machine to the domain will the machine name be added automaticaly to the ADS>Domain name >users>Domain admin > Members.

If i remove the machine name from that part will it be deleted from the machine too.

LVL 11

Author Comment

ID: 18821547
My management says it should not be there i have tried explaining them that it is a srios problem but they want to remove it and monitor for a week.What would be the problem.

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

LVL 96

Accepted Solution

Lee W, MVP earned 2000 total points
ID: 18821557
If you want to illustrate/test, DO NOT do it company wide - pick 10-20 machines and do it to them...

Problems I can see:
Unable to deploy software
Unable to manage clients remotely through Computer Management
Unable to run scripts remotely on the clients

Those are just the things that come to mind...
LVL 11

Author Comment

ID: 18821569
Ok if i need to test it on 20 machines is there a easier way to remove it rather that doing it on each machine
LVL 12

Expert Comment

ID: 18821621
here is the vbs script from Microsoft to remove multiple domain accounts


Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question