Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Remove user automagically from local administrator group via policies

Posted on 2014-01-24
2
Medium Priority
?
310 Views
Last Modified: 2014-01-30
Hello,

Never been super knowledgable about creating network policies, or enforcing policies automagically; but I remember working desktop support for a company that automatically removed users from the local administrator group.

As many desktop techs are familar with, users are typically put in the local administrator groups to facilitate software installs/configurations etc.

Does any network engineers/desktop engineers know the best way to make sure that user logins are removed from the computer's local administrator group by setting up an automated check on login or whenever group policies are checked on the computer?

Just want to pass this info on to the engineers here at work where they are asking us to remember to remove everyone from the local Administrator Group and place them in the Power Users Group manually.

Thanks a ton for your help on this.
0
Comment
Question by:Rob Hutchinson
2 Comments
 
LVL 29

Accepted Solution

by:
becraig earned 2000 total points
ID: 39808071
0
 
LVL 57

Expert Comment

by:McKnife
ID: 39808857
Also remember: since win vista, the power users group has the same privileges as the users group.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ever visit a website where you spotted a really cool looking Font, yet couldn't figure out which font family it belonged to, or how to get a copy of it for your own use? This article explains the process of doing exactly that, as well as showing how…
Unable to change the program that handles the scan event from a network attached Canon/Brother printer/scanner. This means you'll always have to choose which program handles this action, e.g. ControlCenter4 (in the case of a Brother).
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

824 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question