ICTNUT Posted December 2, 2005 Posted December 2, 2005 Hi All, Anyone got any idea how to remove group membership from 1700 users in one go. My new ICT Techie decided it would be fun to add all students to the domain admins group. Don't ask !!!!
ChrisH Posted December 2, 2005 Posted December 2, 2005 Cant you just multi select them all in the groups member properties and remove them? Ps I hope you have sent him off to dust all the pcs and clean all the mice :twisted:
Dos_Box Posted December 2, 2005 Posted December 2, 2005 You can with server 2003, not sure about 2000.
russdev Posted December 2, 2005 Posted December 2, 2005 that reminds of certain tech at school i was at who decided it was good idea to make sure that default amin user was called admin good idea.. so what he did was create new admin account called whatever and then deleted main account. but this was novell and back then if deleted main account it gave every user admin status to stop your self being locked out. needless to say wasnt long before we found out the locaation of techies doom install...
ChrisH Posted December 2, 2005 Posted December 2, 2005 You can with server 2003, not sure about 2000. Can you not get round that by using the management tools on an XP machine?
ICTNUT Posted December 2, 2005 Author Posted December 2, 2005 @Dos_Box: Off the top of your head can you remember where, we run Win2k3 servers here but for the life of me I can't find it anywhere. BTW: He no longer has access to any of the servers :-)
ICTNUT Posted December 2, 2005 Author Posted December 2, 2005 @ChrisH: Mutli selecting all users and the selecting properties allows you to global add to a group but not remove them. Unless....... BRB [edit] Nope, I thought that if you selected a group and then selected the add group option it would remove the current groups and re-add the selected ones but it does not. [/edit]
ChrisH Posted December 2, 2005 Posted December 2, 2005 I just tried it with three accounts in the group > Members tab it works for me.
GrumbleDook Posted December 2, 2005 Posted December 2, 2005 Can't you just go into the AD Users and Computers, go to the properties of the group and the members tab, then select everyone, then control+leftmouse to deselect those you want to keep. Then you hit the remove button.
ChrisH Posted December 2, 2005 Posted December 2, 2005 Thats what I meant my explanation was just badly worded
ICTNUT Posted December 2, 2005 Author Posted December 2, 2005 GrumbleDook: I knew it was somewhere, Friday afternoon brain ache. Cheers all problem sorted ;-)
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now