Remove logged in user from local Administrators group
Log In or Register to download the BES file, and more.

1 Votes

Description

This action will remove the logged in user from the local Administrators group from the target workstation.  It will only appear relevant if the active user is already a member of the group.

Property Details

ID24889
StatusProduction - Fully Tested and Ready for Production
TitleRemove logged in user from local Administrators group
DomainBESC
CategoryGroup Membership
SourceInternal
Source Release Date1/25/2018 12:00:00 AM
KeywordsRemove user rights local admin
Added by on 1/25/2018 12:38:54 PM
Last Modified by on 1/25/2018 12:38:54 PM
Counters 2016 Views / 28 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 1 rating. ** Log In or Register to add your rating.

Relevance

isWindows (Relevance 1172)
Used in 1119 fixlets and 527 analyses   * Results in a true/false
Show indented relevance
windows of operating system
Used in 2 fixlets and 1 analsis   * Results in a true/false
Show indented relevance
(select ("ProductType from Win32_OperatingSystem") of WMI) as string contains "1"
Used in 1 fixlet and 1 analsis   * Results in a true/false
Show indented relevance
exists (members whose ((it as a string) contains (name of logged on user)) of local group "administrators")

Actions

Action 1 (default)

Action Link Click here to deploy this action.
Script Type BigFix Action Script
waithidden net localgroup administrators {"DOMAIN\"& name of logged on user} /delete
Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.


Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!
ReynardMuldrake -
Glad you found it useful!
drbdanish -
This script works. Just like Reynard said change the target domain in action Also it can be used to add user in users local group. That's what I used it for. Worked well.
ReynardMuldrake -
Action will need to be modified with the target domain. Script is tested and working. Takes effect upon reboot.