Remove "Administrator" rights from devices.

We have a requirement to remove "Administrator" rights from our "Hybrid AD joined" devices. These devices are enrolled with "Administrator" user account type (Autopilot Profile).   Is there any way...