asked on

Group Policy to remove Domain\Local Admin

I am looking for a Group Policy to remove DomainName\Local Admin from my workstations. Attached is a screen shot of the Local workstation, Computer Management, Local usere and groups, Administrators with the Member I want to remove from my domain workstations.

Thank you [
local-admins.jpg

Krzysztof Pytko

Use within that GPO node named Restricted Groups. You can read more abot that in the Internet because it's inconvenient placing links on a mobile ;)

If you have at least one Win7/2008 you can use Group Policy Preferences for that, but firstly you need to install Client Side Extension on XP/ 2003 machine. I will post links a little bit later or you can google for that. Thanks

Regards,
Krzysztof

Randy Madej

ASKER

The networi is most xp machines I have 4 Win 7 and all servers are 2003

ASKER CERTIFIED SOLUTION

Krzysztof Pytko

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Stelian Stan

Like iSiek suggested, I think this should help: http://adisfun.blogspot.com/2009/04/security-filtering-and-group-policy.html

Krzysztof Pytko

Nope, this link from Mike's blog is for filtering GPO appliance :) He needs to restrict membership of local Administrators group on a server/PC :]

Krzysztof

Stelian Stan

Sorry about that, I posted the wrong link: http://www.techrepublic.com/blog/datacenter/change-local-username-and-password-via-group-policy/3185