Remove users from local administrators group

[Bad boy Warrior]

Hello all

My daily question

Over our network som users were made local admins in order for them to do their work. Now we found the way around and dont need these lot to be in the LOCAL admin group. I want to remove them using a script but not sure where to start. Coudl you guys please advise?

thx as always

[Ctrl-X]

How about using Group Policy to control Administrators group membership?

[Bad boy Warrior]

How about using Group Policy to control Administrators group membership?

I tried googling for this but nothing obvious came up for me to read on. Can you explain a bit more please?

cheers

Remember theyre not part of domain admins. I know you can remove users from groups created on the domain. Theyre local admins.

Edited October 18, 2006 by Bad boy Warrior

[Ctrl-X]

Check out Description of Group Policy Restricted Groups. Basically you manage membership of local groups through Group Policy. Any local changes to the groups are overwritten by the policy settings, so don't forget to include the local Administrator account and the Domain Admins group in the member list!