Solved

Need to revoke local admin rights for all users - domain-wide using GPO.

Posted on 2014-12-02
2
237 Views
Last Modified: 2015-01-02
Currently users have local admin rights and this is no longer necessary.  What's the best and easiest method to change a current user who's a local admin to a regular user.  Thanks.
0
Comment
Question by:LB1234
2 Comments
 
LVL 10

Accepted Solution

by:
Walter Padrón earned 250 total points
ID: 40476904
Open the Group Policy Management console and create a new GPO

Under Computer configuration > Windows Settings > Security Settings > Restricted Groups add the local  Administrators group, if you setup the "Members of this group " portion of the policy, it will remove anything else that is listed locally. It will only apply the group that is in your policy.

** Make sure to get the "Domain Admins" group added and the policy added to computers OU

Best regards
0
 
LVL 15

Assisted Solution

by:Rob Stone
Rob Stone earned 250 total points
ID: 40477033
Another method is to use GPP which offers more flexibility.  This post offers a really good overview of how you can use it to dynamically assign users local admin with item-targeting or by using AD Groups.

http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local-administrator-groups/
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
RSOP Red "X" 7 45
MSDN Licensing query 5 85
Windows PC's still connected to domain even though server/domain removed. 6 41
Set up secondary Domain Controller 4 71
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question