Learn How to Remove Admin Rights from Users and Understand the Options Available for Modifying Local Group Membership of Clients
Learn how to remove admin rights from users and to understand the options available for modifying local group membership of your clients in this post. If you have hundreds – or even thousands – of desktops, it is not feasible to do this manually. Fortunately, Microsoft provides two mechanisms in Group Policy to manage local group membership. The first is a Group Policy extension called Restricted Groups. Restricted Groups allows you to overwrite the existing local group with what you have configured in the Group Policy setting.
The other option is within Group Policy Preferences. The Local Users and Groups extension allows you to modify the local group membership without overwriting the existing groups. Additionally, Microsoft offers a tool called LAPS, (Local Administrator Password Solution). When a particular scenario is more complex than these allow, scripts can be used to address as well.