Remove Domain Admin

Posted on 2007-03-29
Last Modified: 2010-03-05

I need to remove Domain Admins from all the machines in my Domain.How can i do it.Please suggest me the easiest way i can perform this on 1,500 machines.

Question by:bsharath
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
LVL 96

Expert Comment

by:Lee W, MVP
ID: 18821524
I have to ask why?  I mean, doing this is going to create SERIOUS management problems for you... at least it would for me...
LVL 11

Author Comment

ID: 18821543
I know but
When we add a machine to the domain will the machine name be added automaticaly to the ADS>Domain name >users>Domain admin > Members.

If i remove the machine name from that part will it be deleted from the machine too.

LVL 11

Author Comment

ID: 18821547
My management says it should not be there i have tried explaining them that it is a srios problem but they want to remove it and monitor for a week.What would be the problem.

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

LVL 96

Accepted Solution

Lee W, MVP earned 500 total points
ID: 18821557
If you want to illustrate/test, DO NOT do it company wide - pick 10-20 machines and do it to them...

Problems I can see:
Unable to deploy software
Unable to manage clients remotely through Computer Management
Unable to run scripts remotely on the clients

Those are just the things that come to mind...
LVL 11

Author Comment

ID: 18821569
Ok if i need to test it on 20 machines is there a easier way to remove it rather that doing it on each machine
LVL 12

Expert Comment

ID: 18821621
here is the vbs script from Microsoft to remove multiple domain accounts

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question