Search code examples
group-policy

Standard user in computer


I have 100 computers that connect to domain. In every computer the domain users defines as administrator in local computer. I want that all users in computers that assign to domain, will be standard user not administrator. How can I do it in group policy? Another way?


Solution

  • for /f "skip=1" %%a in ('wmic UserAccount get Name') do (
        if not "%%a"==""  (
                    net localgroup Users "%%a" /add
                    net localgroup Administrators "%%a" /delete             
        )
    )