Remove Local Administrator from Administrators Group

[intel233]

I need to remove the local Administrator account along with the Domain Admin account. I am able to use a GPO and remove the Domain Admin account and add in only the accounts I want but I can't get rid of the local Administrator account. I have the Action for the GPO is Update. Delete all members and Delete all member groups are both checked.

 

[karlisi]

I suppose you want to remove local Administrator from workstation local administrators group. You can't. Instead you can disable local Administrator account.

===
Karlis
ECDL; MCSA

 

[intel233]

Can that be done via that group policy I mentioned? I did not recall seeing anything about disabling, or would I need a separate policy?

 

[karlisi]

Under Computer configuration -> Policies -> Windows settings -> Security settings -> Local policies -> Security options
Accounts: Administrator account status

Please read carefully the explanations given, before enabling this policy. If there will be no other users or groups in local administrators group, you will loose administrative access to computer even in Safe mode!

===
Karlis
ECDL; MCSA