Category filter
Script to change an admin user to a non-admin user in Windows
A user belonging to the ‘Administrators’ group has complete and unrestricted access to the device. Suppose you want to revoke the administrator privileges of a user to prevent them from making system-wide changes. You can easily get it done by writing commands to remove the users from the ‘Administrators’ group and add them to the ‘Users’ group. These commands can be embedded in a script, and you can run it directly from Hexnode using the Execute Custom Scripts action.
The Sample Scripts provided below are adapted from third-party Open-Source sites.
Batch file script to change an admin user to a non-admin user
|
1 2 3 4 5 6 7 8 9 10 11 |
Rem Step 1: Add the user to the Users group. NET LOCALGROUP Users Username /ADD Rem Step 2: Remove the user from the Administrators group NET LOCALGROUP Administrators Username /DELETE Rem Step 3 (Optional): List the users belonging to Administrators or Users group NET LOCALGROUP Groupname |
PowerShell script to change an admin user to a non-admin user
|
1 2 3 4 5 6 7 8 9 10 11 |
#Step 1: Add the user to the Users group Add-LocalGroupMember –Group “Users” -Member “Username” #Step 2: Remove the user from the Administrators group: Remove –LocalGroupMember –Group “Administrators” -Member “Username” #Step 3: (Optional): List the users belonging to Administrators or Users group Get-LocalGroupMember –Group “Groupname” |
After executing the .ps1 file from the Hexnode, if you come across as an output such as “command is not recognized” in the Action History, add this to the beginning of the file, followed by the steps 1 and 2.
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 |
if (($pshome –like “*syswow64*” - and ((Get-WmiObject Win32_OperatingSystem).OSArchitecture -like “64*”)) { write-warning “Restarting script under 64 bit powershell” #relaunch this script under 64 bit shell & (join-path ($pshome –replace “syswow64”, “sysnative”)\powershell.exe) -file $myinvocation.mycommand.Definition @args #This will exit the original PowerShell process. This will only be done in case of an x86 process on a x64 OS. exit } |
-
It is recommended to manually validate the script execution on a system before executing the action in bulk.
-
Hexnode will not be responsible for any damage/loss to the system on the behavior of the script.
