Home / server / Questions / 150432
Accepted
ICTdesk.net
Asked: 2010-06-12 05:25:17 +0800 CST

Change localadmin on workstations

  • 772

We have scanned our domain and there are just a couple of PC's where an user is localadmin (this was enabled in the past for a certain application/installation). We need to disable this now. Is there a way to do this remotely?

OS: windows XP clients in network / domain environment

windows-xp

3 Answers

  1. Best Answer

    Open Active Directory Users and Computers, select the computers in question, right click, select manage, and remove their domain accounts from the Administrators group. Close, and have the users log out and log back in again.

    Problem solved.

    • 3

  2. I think what you are looking for is the use of restricted groups through group policies. I found this article which explains the use of restricted groups in detail: http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

    Hope this helps.

    • 0

  3. you could try psexec \\machinename net localgroup "administrators" "domain\user" /delete

    • 0