Solved

Remove user automagically from local administrator group via policies

Posted on 2014-01-24
2
274 Views
Last Modified: 2014-01-30
Hello,

Never been super knowledgable about creating network policies, or enforcing policies automagically; but I remember working desktop support for a company that automatically removed users from the local administrator group.

As many desktop techs are familar with, users are typically put in the local administrator groups to facilitate software installs/configurations etc.

Does any network engineers/desktop engineers know the best way to make sure that user logins are removed from the computer's local administrator group by setting up an automated check on login or whenever group policies are checked on the computer?

Just want to pass this info on to the engineers here at work where they are asking us to remember to remove everyone from the local Administrator Group and place them in the Power Users Group manually.

Thanks a ton for your help on this.
0
Comment
Question by:Rob Hutchinson
2 Comments
 
LVL 28

Accepted Solution

by:
becraig earned 500 total points
Comment Utility
0
 
LVL 53

Expert Comment

by:McKnife
Comment Utility
Also remember: since win vista, the power users group has the same privileges as the users group.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Join & Write a Comment

Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now