Solved

Automated Way to Remove Domain Users from Administrators Group

Posted on 2014-04-10
2
210 Views
Last Modified: 2014-04-12
I have a LAN where all the workstations (Windows 7 and XP) have Domain Users added to the Local Administrators group. Is there and automated way to remove Domain User from the local Administrators group i.e. with a Net command I can put in the login script?
0
Comment
Question by:LockDown32
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 81

Accepted Solution

by:
David Johnson, CD, MVP earned 250 total points
ID: 39993310
net localgroup administrators %username% /delete
0
 
LVL 17

Assisted Solution

by:lruiz52
lruiz52 earned 250 total points
ID: 39993350
Or you can configure "Restricted Groups" in a GPO.

When you set this policy, it will overwrite any existing local group members, you dictate who the members are.

You will find this in Computer Configuration\Security Settings\Restricted Groups.

Modify the GPO to include the groups you want to be effective You will need to include the Local Administrator Account also,  This will REPLACE any current groups that exist on the machine and without specifying an Local Administrator account in the GPO, you may lock yourself out of the computer!

For a how to check the link below;
http://windowsmatters.com/2011/09/16/how-to-use-restricted-groups

Hope this helps!
0

Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Every system administrator encounters once in while in a problem where the solution seems to be a needle in haystack.  My needle was an anti-virus version causing problems with my Exchange server. I have an HP DL350 with Windows Server 2008 Stand…
Remote Desktop Protocol or RDP has become an essential tool in many offices. This article will show you how to set up an external IP to point directly to an RDP session. There are many reasons why this is beneficial but perhaps the top reason is con…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question