Forum Discussion
drivesafely
Jan 12, 2025Iron Contributor
Intune - remove local admins
Hello All, In our workgroup environment, users currently have local admin rights. After performing Entra join and onboarding devices to Intune, how can we remove all users from the local administr...
Salamat_Shah
Jan 13, 2025MCT
Yes you can do it, To remove users from the local administrators group, Intune's Device Configuration profiles or a custom PowerShell script can be used.
For updating IP addresses, leveraging Group Policies (if domain-connected) or deploying a PowerShell script via Intune is the most straightforward method.
drivesafely
Jan 13, 2025Iron Contributor
Hello Salamat_Shah
Thanks for the response and confirmation.
For removing users from local admin group, can you provide more details on which setting in Device Configuration would help. Are you suggesting the Restricted Group settings though custom profile via CSP?
https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-restrictedgroups
Thanks,