Remove local administrator rights from multiple machines

Hi all,
We have a load of Macs on active directory. Most of them have local admin rights. Is there a quick and easy way to remove local admin rights and change them to standard users. I really don't want to do them one by one?
Please give me some good news
Kind Regards,
BigJava

Hi baltwo,
Thanks for the suggestion but I found out how to do it with this UNIX command:
sudo dseditgroup -o edit -n . -d username -t user admin
and running it as the "root" user.
Thanks

Similar Messages

Local Administration rights for Xcelcius and Crystal Reports

Hello Customercare,
I am currently compiling a list of software that does and does not require local administrator rights to install and run.
I was wondering if you would be able to assist me, we currently use Crystal Reports version 8.5 and Crystal Xcelsius 4.5. I need to find out if these programs require local administrator rights on the computer they are to be used on to a) Install properly and B) run from that computer by a user without local administrative rights for that machine.
Please let me know or point me in the right direction of a resource who would be able to help me with the above information.
Many thanks for your time,
Phil Booth
GroupM
Technical Support Engineer

Hi Joseph,
Download [Product guide/end userdocument|https://websmp103.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000713358&_SCENARIO=01100035870000000202&] select your product.
For Business objects Integration kit for SAP click [here|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a00ee3b2-5283-2b10-f1bf-8c6413e0898f]
Regards,
Shweta

How can we change local administrator password in 500 machines in a domain from a centralized location?

How can we change local administrator password in 500 machines in a domain from a centralized location?

This was moved out of the Profile forum.
You should ask this question at
www.answers.microsoft.com.
Or I can move it into another forum if you'd like.
Thanks!
Ed Price a.k.a User Ed, Microsoft Experience Program Manager (Blog,
Twitter,
Wiki)

Windows 7, removed Administrator rights from my user with Administrator disabled..

Windows 7, removed Administrator rights from my user with Administrator disabled..how solve without restore everything please??
Cause drag&drop was disabling each time there was an high privilege process, I tough to fix this annoying trouble removing my user from Administrator group..in fact I fixed that situation.
But NOW I have another serious problem: my user is not able to do nothing, and my administrator user was disabled and as only belonging to homeuser group I cannot enable it!!! In this moment I am crying because I have fear I will need to restore everything, please do you know a way to enable the administrator user again even if without admin privilege?? Do you know a software that fix it or an also not clean way to avoid a complete restore??
Thanks in advance and ciaoo
Fabio

in control panel > user accounts > change account type select admin.
Thinkpad R61 7733-1GU
Thinkpad X61T 7762-54U
Thinkpad X60T 6363-4GU
Did a member help you today? Thank them with a Kudo!
If a post answers your question, please mark it as an "Accepted Solution"!
Regards,
GMAC

Are local Administrator rights required to install or run the following pieces of software

Hello,
I was wondering if you would be able to assist me. I am currently cataloging various bits of software in use within our company and need to know if they a) require local administrator rights to install on a computer and b) require local administration rights to run after being installed.
The pieces of software in question are:
Blackberry Desktop Manager Version 4.3.0.15
Blackberry Enterprise Server Version 4.1.3.18
Any assistance gratefully received, or if you could point me in the direction of who I should be asking that would be great.
Many Thanks,
Phil Booth
Group M
IT Desktop Support technician.
Phillip Booth
GroupM
Technical Support Engineer
IT
[email protected]
Office: 0207 158 5995
DID: 5995
124 Theobald's Road London WC1X 8RX United Kingdom
www.groupm.com

Superb detail, thank you.
(1) Download the Windows Installer CleanUp utility installer file (msicuu2.exe) from the following Major Geeks page (use one of the links under the "DOWNLOAD LOCATIONS" thingy on the Major Geeks page):
http://majorgeeks.com/download.php?det=4459
(2) Doubleclick the msicuu2.exe file and follow the prompts to install the Windows Installer CleanUp utility. (If you're on a Windows Vista or Windows 7 system and you get a Code 800A0046 error message when doubleclicking the msicuu2.exe file, try instead right-clicking on the msicuu2.exe file and selecting "Run as administrator".)
(3) In your Start menu click All Programs and then click Windows Install Clean Up. The Windows Installer CleanUp utility window appears, listing software that is currently installed on your computer.
(4) In the list of programs that appears in CleanUp, select any iTunes entries and click "Remove", as per the following screenshot:
(5) Quit out of CleanUp, restart the PC and try another iTunes install. Does it go through properly this time?

When attempting to remove the Filmconvert plugin from my machine I noticed my adobe\common\plug-ins\CS5.5\MediaCore folder had Vanished !

When attempting to remove the Filmconvert plugin from my machine I noticed my adobe>common>plug-ins>CS5.5>MediaCore folder had vanished ! and there was also no folder for my cc version at all ? so digging deeper i noticed a large amount of my after effects plugins were installed separately in my applications folder ! I m very confused as to how this has happened and was wondering if anything like this had happened to any1 else ? and how to get everything back to normal ?
Im now worried theres something wrong with my bios on my Mac and i don't no why my plug-ins would have vanished from where they should be installed? as they still work fine in the actual software itself.

If you are on a Mac the Library folder is hidden. You have to jump through some hoops to get there.

Find out who has given local administrator rights to standard domain user?

In my Organization i have faced problems with domain administrator, it seem that all of a sudden a standard domain user is having Local administrator rights. Can anyone please help me how to find out who has given local administrator rights to that standard
domain user account?

Hi,
Based on your requirement, you need to enable the auditing in your Active Directory to identify the user/ group changes and WHO made the change etc.
Checkout the below steps to enable auditing for AD User Changes,
1. Open GPMC console, click Start --> Administrative Tools --> Group Policy Management.
2. Right click the Default Domain Controllers Policy, and then click Edit.
3. Navigate to Audit Policy node, “Computer Configuration/ Policies/ Windows Settings/ Security Settings/ Local Policies/ Audit Policy”.
4. Now enable the Success auditing for - Audit Account Management and Audit Directory Service Access.
5. Execute the command “GPUPDATE /FORCE” in the Domain Controller to force apply the GPO settings.
For Windows Server 2008 R2 and later versions, additional configuration is required in “Advanced Audit Policy Configuration” section in Default Domain Controller Policy.
1. Go to the node DS Access (Computer Configuration/Policies/Windows Settings/Security Settings/Advanced Audit Policy Configuration/Audit Policies/DS Access.)
Enable Success auditing for the following settings
- Audit Directory Service Changes
2. Go to the node Account Management (Computer Configuration/Policies/Windows Settings/Security Settings/Advanced Audit Policy Configuration/Audit Policies/Account Management.)
Enable Success auditing for the following settings
- Audit User Account Management
After completing the audit settings, configure SACL in Active Directory Users and Computers console for enabling the geneartion of AD Change events in the eventlog as shown below,
Checkout the below KB article on complete list on Event ID and Description for AD Changes,
http://support.microsoft.com/kb/947226/en-us
Regards,
Gopi
JiJi Technologies

How can I remove an external HDD from Time Machine

I want to remove an external HDD from Time Machine but it is not shown in the list, how can I do this please?

Open Time Machine preferences, click on the Options button. At the bottom of the exclusion list click on the Add [-] button, select the drive in the File dialog, click on the Exclude button. Understand that this configuration will only remain as long as the drive remains mounted.

How to remove an external drive from time machine backup

In time machine I also backup to an external drive. I recently bought a new external drive and thats working fine. However, it still wants to backup to my previous drive which I dont want to use. In time machine preferences I see the old and new drive listed. Both are greyed out so I cannot deselect the older drive.
Suggestions?

mhattonmd wrote:
So when I open time machine preferences I see time machine and both external drives listed. If I click on options I see both external drives but I cant select either as they are both greyed out.
If you see them both listed on the initial screen of TM prefs, they are both selected as backup drives. They are not being backed up. They are being used by Time Machine as a destination. You need to use “Select Disk…” to remove the external drives from the destination drives. Select Disk does not choose the drives you want to back up. It chooses the drives you wan to back up to.

How to remove old backup files from time machine? Lion OSx

Hi everyone,
I am just wondering how to efficiently and safely remove the old backup files from time machine? I tried once with command, but it damaged my extra-disk... Does Lion OSx have fixed that?
Many thanks
Hong

Blue-
Time Machine will automatically delete back-ups as the need for space arises. If you want to delete a certain file (application, document, whatever) and have it gone for good you can do that as well.
The best place on the web for information about Time Machine is...
http://pondini.org/TM/Home.html
...it covers everything!
Clinton

Exchange Management Console require workstation local administrative rights to run?

Does launching the Exchange Management Console require local administrative permissions?
I understand I need Exchange permissions to perform Exchange tasks, but I am wondering what permissions are required just to run the Management Console?
Jason Meyer

Hi,
If you just want to launch the EMC, you need not require any special permission.
However, if you want to modify anything, you should assign the corresponding permission to the appropriate user.
I recommend you refer to the following articles to understand the permission in exchange:
http://technet.microsoft.com/en-us/library/dd351175(v=exchg.150).aspx
AD Domain Rights Needed to Manage Microsoft Exchange 2010
Hope this helps!
Thanks.
Niko Cheng
TechNet Community Support

Linked server problem, its works locally but not from remote machine

Hi,
i am using the application NAV and have written the query in the application. am using automation variable to link to the SQL Server.
The problem is that , the query which i have written executes only when i am working on local machine .
I mean when i want to execute the same query from remote machine through my app Dynamics NAV then its not getting executed.
Thanks in advance

Depends on what you are trying to do and what security you are using.
What error did you get?
If you are using windows authentication then take a look at delegation
http://www.databasejournal.com/features/mssql/article.php/3696506/Setting-Up-Delegation-for-Linked-Servers.htm
Regards, Ashwin Menon My Blog - http:\\sqllearnings.com

Give a windows domain user local administrative rights?

I'm familiar with managing servers/computers in a windows environment, and I can't seem to find a tool to do something similar in OS X 10.5. I'm getting ready to ship a macbook pro to an employee who will be authenticating against our active directory windows domain for login. The machine is already setup to allow this (and I'm able to log in using my network credentials currently). However, I'd like to also give the user administrative rights so he can install software as he sees fit. In windows, I would just goto the groups section and add the user by typing in his account as : Domain\user and it would add him to that group. I haven't been able to find anything similar with the MacBook so far. Any help would be greatly appreciated.
Message was edited by: vlitsupport
Also.. if this needs to be in another section of the forum, please let me know.
Thanks!
Message was edited by: vlitsupport

found a good tutorial:
http://www.smallbizserver.net/Articles/tabid/266/articleType/ArticleView/Article ID/234/PageID/359/Default.aspx

I remove my hard drive from time machine,now it won't recognize hard drive

i got a delayed error on my time machine backup saying Time Machine couldn’t complete the backup to my back up hardrive, so what i did i removed my hard drive in time machine "select disk" , thinking if ill plug it back it'll recognize but it didn't.. now it wont show anymore on my time machine, but it shows on my mac computer and disk utility.. how do i fix this? please help... i have the late macbook pro 2010 running osx mountain lion

Try repairing it:
Open Disk Utility in the Utilities folder. Select your Time Machine drive in the list on the left. Click on the First Aid tab in DU's main window, click on the Repair Disk button.

Maintaining an iWeb site from multiple machines?

After a reasonable amount of research I am pretty sure the answer is "no" but here we go...
I have both a Laptop and a desktop and would like to be able to update and maintain my site from either machine. From the looks of things this isn't as easy as it looks. Does anyone have any ideas on this?

James,
I already posted a "thank you" after the next post. I am anxious to try using the Flash Drive with my desktop and laptop.
I found out the hard way and lost a few entries. I had done my original blog and photo pages on my desktop. I copied all the "Domain" files onto the iDisk and then uploaded them on my laptop. (That took too long!) But everything was working fine. Then I added a couple more pages via the desktop, and forgot to put them on the laptop. I came to Ireland, with the laptop and published several new pages and lo and behold those couple of pages had gone missing!! I realized fairly quickly that I had overwritten those pages.
Before I go back to the US next week, I am going to load all the "Domain" files onto a flash drive and take it with me and transfer to my desktop. I have to leave the laptop here in Ireland with my husband.
Could you tell me exactly what I have to copy onto the flash drive? I had the instructions printed up somewhere, but they are not with me now!
Now another question for you!
Obviously I have all my .mac information on both of my computers. I will be visiting my daughter's after I return. Can I plug my flash drive into her laptop (an Apple, of course) - log into my .mac account and then add and publish to my iWeb sites? Or are there some other adjustments I have to make to my daughter's iWeb before I can publish to my web site. We all have the same edition of iLife 06 - I had bought a family pack.
Any advice?!! Thanks
Geraldine
iMac G4 Mac OS X (10.4.2)

Remove local administrator rights from multiple machines

Similar Messages

Maybe you are looking for