Re: How to globally change machine local admins

From: Joe Richards [MVP] (humorexpress@hotmail.com)
Date: 11/05/02 

From: "Joe Richards [MVP]" <humorexpress@hotmail.com>
Date: Tue, 5 Nov 2002 09:56:59 -0500

You could script a freeware tool called lg on www..joeware.net to do this.
Basically your script would loop through the machines in a list, enumerate
the administrators group, parse out the entries and remove all of them
except the ones you want to keep.

You could also do this with ADSI. 

--
Joe Richards
www.joeware.net
---
"Max" <max@spamjam.com> wrote in message
news:e8ko5NChCHA.2364@tkmsftngp08...
> For security reasons, we want to remove users from the local admin group
on
> workstations throughout our domain.  Is there a utility available which
can
> change the machine local admins to a specified group, and remove those not
> in this group?
>
> Thanks all.
>
>

Relevant Pages

  • Re: SBS2003 Client Setup Wizard Problem
    ... On the problematic machines, I wonder if the Domain Users group ... any user logging into these machines can run the script (i.e, ... local admin group in order to succesfully run the client setup wizard ...
    (microsoft.public.windows.server.sbs)
  • Re: Forcing groups into the local admin account
    ... of the Administrators group on the machines within the scope ... with the only way to change it being changing the GPO ... > domain groups to a machines local admin group via GPO. ... > current permissions except for the local admin account. ...
    (microsoft.public.windows.group_policy)
  • Re: Changing Local Admin Passwords!
    ... the script will run form a win2k workstation and it will change all ... machines in the list, that you have local admin rights to. ... If you check out MS Script center you can easily log it to a ... Currently I change my Local Admin ...
    (microsoft.public.windows.server.security)
  • Re: Changing Local Admin Passwords!
    ... the script will run form a win2k workstation and it will change all ... machines in the list, that you have local admin rights to. ... If you check out MS Script center you can easily log it to a ... Currently I change my Local Admin ...
    (microsoft.public.win2000.security)
  • Re: admin group in OU - help please
    ... is not in a Local admin group the i get script error: ... If i login with a user that has local admin rights then the script adds user ... > administrator on their machines and then set ...
    (microsoft.public.win2000.security)