Solved

Remove user automagically from local administrator group via policies

Posted on 2014-01-24
2
297 Views
Last Modified: 2014-01-30
Hello,

Never been super knowledgable about creating network policies, or enforcing policies automagically; but I remember working desktop support for a company that automatically removed users from the local administrator group.

As many desktop techs are familar with, users are typically put in the local administrator groups to facilitate software installs/configurations etc.

Does any network engineers/desktop engineers know the best way to make sure that user logins are removed from the computer's local administrator group by setting up an automated check on login or whenever group policies are checked on the computer?

Just want to pass this info on to the engineers here at work where they are asking us to remember to remove everyone from the local Administrator Group and place them in the Power Users Group manually.

Thanks a ton for your help on this.
0
Comment
Question by:Rob Hutchinson
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 29

Accepted Solution

by:
becraig earned 500 total points
ID: 39808071
0
 
LVL 54

Expert Comment

by:McKnife
ID: 39808857
Also remember: since win vista, the power users group has the same privileges as the users group.
0

Featured Post

Don't Miss ATEN at InfoComm 2017!

Visit booth #2167 to see the  new ATEN VM3200 32 x 32 Modular Matrix Switch. Other highlights include the VE8950 4K HDMI Over IP Extender, VS1912 12-Port DP Video Wall Media Player  and VK2100 ATEN Control System. Register now with Free Pass Code ATEN288!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

No single Antivirus application (despite claims by manufacturers) will catch or protect you from all Virus / Malware or Spyware threats. That doesn't stop you from further protecting yourself however - and this article is to show you how.
Configuring Remote Assistance for use with SCCM
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question