October 18, 200619 yr Hello allMy daily question Over our network som users were made local admins in order for them to do their work. Now we found the way around and dont need these lot to be in the LOCAL admin group. I want to remove them using a script but not sure where to start. Coudl you guys please advise?thx as always
October 18, 200619 yr Author How about using Group Policy to control Administrators group membership?I tried googling for this but nothing obvious came up for me to read on. Can you explain a bit more please?cheersRemember theyre not part of domain admins. I know you can remove users from groups created on the domain. Theyre local admins. Edited October 18, 200619 yr by Bad boy Warrior
October 18, 200619 yr Check out Description of Group Policy Restricted Groups. Basically you manage membership of local groups through Group Policy. Any local changes to the groups are overwritten by the policy settings, so don't forget to include the local Administrator account and the Domain Admins group in the member list!
Create an account or sign in to comment