Remove Local Administrator Rights Across Domain

CeD

Limp Gawd
Joined
Feb 10, 2003
Messages
182
Hey all,

Is there a way to remove local administrator rights to accounts/computers across an entire domain?
 
GPO to set the membership of the locla admins group. It will replace all enteries with the ones specified in the GPO.

In the Group Policy MMC, browse to:
Computer Configuration/Windows Settings/Security Settings/Restricted Groups
Right-Click and choose "Add Group"
The group name you enter will be the group that is restricted (Administrators)
Select the group and choose the allowed members.
 
Back
Top