Can I Remove Domain Admins from Local Administrators Group?
Contents

Yes you could remove Domain Admins Group from Local Administrators Group, but this is not recommended.

Can I remove domain users from local users group?

The perfect solution is to use Group Policy Preferences (GPP) to remove domain user accounts. Navigate to User Configuration > Preferences > Control Panel Settings > Local Users and Groups > New > Local Group to open up the New Local Group Properties dialog box as seen below in Figure 1.

Are domain admins automatically local admins?

Domain Admins are, by default, members of the local Administrators groups on all member servers and workstations in their respective domains. This default nesting should not be modified for supportability and disaster recovery purposes.

James H. Sterling

James H. Sterling

Environmental Science & Climate Journalist

James Sterling reports on renewable energy developments, climate policy, ecological conservation, and green tech innovations around the globe.

Share this article
Twitter Facebook Pinterest