Solved

Automated Way to Remove Domain Users from Administrators Group

Posted on 2014-04-10
2
208 Views
Last Modified: 2014-04-12
I have a LAN where all the workstations (Windows 7 and XP) have Domain Users added to the Local Administrators group. Is there and automated way to remove Domain User from the local Administrators group i.e. with a Net command I can put in the login script?
0
Comment
Question by:LockDown32
2 Comments
 
LVL 80

Accepted Solution

by:
David Johnson, CD, MVP earned 250 total points
ID: 39993310
net localgroup administrators %username% /delete
0
 
LVL 17

Assisted Solution

by:lruiz52
lruiz52 earned 250 total points
ID: 39993350
Or you can configure "Restricted Groups" in a GPO.

When you set this policy, it will overwrite any existing local group members, you dictate who the members are.

You will find this in Computer Configuration\Security Settings\Restricted Groups.

Modify the GPO to include the groups you want to be effective You will need to include the Local Administrator Account also,  This will REPLACE any current groups that exist on the machine and without specifying an Local Administrator account in the GPO, you may lock yourself out of the computer!

For a how to check the link below;
http://windowsmatters.com/2011/09/16/how-to-use-restricted-groups

Hope this helps!
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

After having deployed hundreds of thousands of Terminal Services seats worldwide, I still see all the time people asking me that same old question: "If TS/RDS is that reliable why are you telling me I should reboot it that often? My DC/SQL/Exchange/…
Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question