networkadmin

I am one of few user with admin rights to the company Domain. Our normal policy is to take the users out of the admin group, but sometime the users are left with admin rights on their PC. I am looking for a way to be able to remotely see who has admin rights and then be able to take them out at the same time.