Windows 7 - remove users from local admin domain wide

Posted on 2012-09-13
Last Modified: 2012-10-10
Good morning experts and happy Thursday (Friday is alomst here!)

I have been given the project and time to plan and implemenet removal of 300 users from the local admin group on Windows 7 in a Windows 2008 domain. I have done some reading of posts here but haven't found anything truly applicable.

My goal is to leave my users with as much privilege as possible while removing local admin privileges. Can you offer some insight, direction, advice, details ?
Question by:enorman1
    LVL 57

    Expert Comment

    by:Mike Kline
    So the first thing is why do they have local admin rights to begin with?  I'm not saying that as a bad thing.  I have worked for several IT consulting companies where we have had local admin rights on our laptops because we needed to install programs, make customizations etc.

    You can use restricted groups to define your local admins



    Author Comment

    Hey Mike.

    Giving local admin privileges to our users has been a common practice since I've been here and one supported and endorsed. Now, the time has come to remove those privileges as a directive from above. The auditors have stepped in with this as a strong recommendation.

    Using the link, will this remove users from the local admin group ? And, is there a choice as to what group to put them in ? I have much to learn specific to Windows 7 permissions and the application.
    LVL 57

    Accepted Solution

    If you use the top box you define what groups you want in the local admin,  it will wipe out everything and just add what you define.  Test on a few machines first to get a feel for it.

    There is really no equivalent to local admins.  There will definitely be some pain and griping until people get used to it.  They have been used to being able to do whatever they have wanted on their boxes and now they will be restricted.



    Author Comment

    Thanks Mike. You and the other experts are appreciated, as always !


    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    In this guide, I outline 7 key steps to help technology professionals grow their careers. Whether you have been working in technology for 10 years or for 10 days, follow these steps to help you achieve your career goals and pursue your passions.
    The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
    This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
    This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now