Solved

Need to revoke local admin rights for all users - domain-wide using GPO.

Posted on 2014-12-02
2
234 Views
Last Modified: 2015-01-02
Currently users have local admin rights and this is no longer necessary.  What's the best and easiest method to change a current user who's a local admin to a regular user.  Thanks.
0
Comment
Question by:LB1234
2 Comments
 
LVL 10

Accepted Solution

by:
Walter Padrón earned 250 total points
Comment Utility
Open the Group Policy Management console and create a new GPO

Under Computer configuration > Windows Settings > Security Settings > Restricted Groups add the local  Administrators group, if you setup the "Members of this group " portion of the policy, it will remove anything else that is listed locally. It will only apply the group that is in your policy.

** Make sure to get the "Domain Admins" group added and the policy added to computers OU

Best regards
0
 
LVL 15

Assisted Solution

by:Rob Stone
Rob Stone earned 250 total points
Comment Utility
Another method is to use GPP which offers more flexibility.  This post offers a really good overview of how you can use it to dynamically assign users local admin with item-targeting or by using AD Groups.

http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local-administrator-groups/
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now