Software

Ask something
Question Locked

Unwanted local user in XP

0 helpful
5 replies

by alanotton

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi Y'all,
On the network I look after, a lot of PCs have been identified as having a user account that can be logged on to locally giving full admin access to the machine thus bypassing all security measures in place.
I can get rid of this by logging on to the machine as an administrator and deleting the admin rights from the user. This solves the problem but with 600 PCs on the newtork, can anyone point me at a quick solution/script etc that will do the biz?
Ta.

5 replies

by ic-it

They are already a user so you just need to remove them from the admin group; something like this

net localgroup administrators unwanteduser /delete

by alanotton

Hi, B.
I don't have the script handy... but it was suggested (running a Windows Server 2003 + domain)...I could create a logon script that would delete the local account or change rights to the account when the computer or user logs onto the domain. Just add it to the domain users via a GPO. Let this run on the network for at least a week. You can then run MSBA from microsoft.com to get reports on all machines and their respective accounts/rights, local and otherwise.
Using the NET method, would this accomplish removal on all machines?

by ic-it

That should allow the running without extra credentials (or push through a Ghost Task etc).
Just replace the term unwanteduser with the actual user name.

This discussion is closed to new replies.