Accidentally Removed LocalAdmin group in Active Directory

Question

I meant to remove local admin rights from a security group on our domain controller, but I think I deleted the builtin localadmin group. Nobody has localadmin rights now, including administrators.

Computer Configuration -> Preferences -> Control Panel Settings -> Local Users and Groups

New -> Local Group New Local Group Properties

• Action: Update
• Group name: Administrators (built-in)
• Delete all member users: Checked this box.
• Delete all member groups: Checked this box.

  I thought I was adding my security group, but in the “Members” section I typed in localadmin rather than the security group name. This has removed local admin rights on all devices.

Answer 1

Hi @Vicky Carlson - Repair •

You can use the same Group Policy Preference setting to add the Builtin Local Admin in the local administrator group.

When you check Delete all members user and groups in Group policy Preference , you have to add all groups and accounts should have local administrator permission, Otherwise all accounts will be deleted from local administrator group.

Please don't forget to accept helpful answer