RE: Remove domain user from local administrators group

From: Jim Harrison (ISA) (jmharr_at_microsoft.com)
Date: 10/13/04

  • Next message: GuidoZ: "Re: Remote connections" 
    Date: Wed, 13 Oct 2004 13:46:32 -0700
To: "chang zhu" <cyz2000@yahoo.com>, <focus-ms@securityfocus.com>

    Add this to your logon script:

    net localgroup administrators <username> /delete

    ..replace <username> with the unqualified user name.

    Jim Harrison
    MCP(NT4/2K), A+, Network+
    Security Business Unit (ISA SE)

    "The last 10 years of Internet usage has disproven
    the theory that a million monkeys typing on a million
    typewriters would eventually produce the complete
    works of Shakespeare. ..or maybe it only works for
    typewriters..."
    (unclaimed)

    -----Original Message-----
    From: chang zhu [mailto:cyz2000@yahoo.com]
    Sent: Tuesday, October 12, 2004 8:17 AM
    To: focus-ms@securityfocus.com
    Subject: Remove domain user from local administrators group

    Hi,all

    I just went to this new company and found out that
    each domain user is assigned to local administrators
    group.

    We need to remove domain user from local
    administrators group. Is there any MS utility that
    allows to do this instead of going to each workstation

    to remove and assign them to Power Users group?

    The environment is Win2K and XP.

    Thanks always,

    Chang

    __________________________________________________
    Do You Yahoo!?
    Tired of spam? Yahoo! Mail has the best spam protection around
    http://mail.yahoo.com

    ------------------------------------------------------------------------ 

    ---
------------------------------------------------------------------------
---
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: GuidoZ: "Re: Remote connections"

    Relevant Pages

    • Re: administrator on box also on domain?
      ... > administrators group at the PC then it shows something like: ... > domain_name\Domain Admins ... so we add the user to the local Administrators ...
      (microsoft.public.windows.server.active_directory)
    • Re: User rights
      ... This issue is with SBS automatically pulling the local user account into ... Will it still migrate that user up to SBS? ... are automatically Sharepoint Administrators. ... > to remove the Power Users group from the Sharepoint Administrators group. ...
      (microsoft.public.windows.server.sbs)
    • Odd behaviour with user accounts (accounts "hidden")
      ... installation), dad and kids. ... "Administrators" group. ... As soon as I remove "kids" from the administrators group the account ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Confused
      ... Administrators group so they are administrators of the child domain, ... By default the Domain Admins of a domain are member of the ...
      (microsoft.public.win2000.active_directory)
    • Re: What are the necessary rights to install SQL Server?
      ... You need full administrator rights to install SQL server. ... > indirect membership of the local Administrators group, ...
      (microsoft.public.sqlserver.setup)