Active Directory Pro

Easily Remove Local Admin Rights

with AD Pro Toolkit

Scan domain computers to list all members of the local administrators group.
REMOVE local admin rights on multiple remote computers.

Download Free Trial

Key Features

Enhance Security and Ensure Compliance Requirements

Removing local admin rights reduces the risk of malware, ransomware and unauthorized changes
to the computer. It enforces the principle of least privilege to help ensure compliance with your organizations policies.

List Local Administrators

Scan remote computers to list users that have local admin rights

Remove Admin Rights

Remotely remove users from the local administrators group

Export Report

Export the members of the local administrators group to csv.

Include Nested Groups

List the members of nested groups to get a complete list of admins.

Show All Groups

Get a list of members of all local groups such as RDP users or backup operators.

Local & Domain Users

Get both local and domain user/groups that have admin rights

Download Free Trial

Steps to find and remove local admin rights

  1. Click on Security Tools > Local Admins Report
  2. Select an OU or leave as default to scan the entire domain
  3. Click “Run” to start the scan.
  4. Select the accounts you want to remove from the administrators group and click “Remove member”.

Note: You can filter and search the report to find specific users on multiple computers.

Requirements

  • WMI needs to be open inbound on the target computers.

Getting Started is Seriously Simple!
Try it for Yourself

Download Free Trial Schedule Demo