@EnterpriseArchitect, Thanks for posting in Q&A. To remove users from local administrators, we can configure it via Local user group membership (preview) profile. Add (Replace): Replace the members of the selected groups with the new members you specify for this action. Here is a link with more details:
But as remove the built-in Administrator account from the built-in Administrators group is blocked at SAM/OS level for security reasons. So we can only remove other users exclude built in administrator from local administrators.
Hope the above information can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.