撤消本地管理员，但不撤消域管理员

Question

Using this script to remove all local admins from each computer however it also removes domain admins is there a way to do this without removing domain administrators?

$remove = net localgroup administrators |
          select -skip 6 |
          ? {$_ -and $_ -notmatch 'successfully|^administrator$'};
foreach ($user in $remove) {
    net localgroup administrators "`"$user`"" /delete
};

Answer 1

Another solution:

Get-LocalGroupMember administrators | 
   Where {$_.name -like "$($env:COMPUTERNAME)\*" -and $_.objectclass -eq "User"} | 
      Remove-LocalGroupMember -Group 'Administrators'

To make it more locale independent you could use SID S-1-5-32-544 instead of a group name.

Answer 2

Here is one option:

Get-LocalGroupMember -Group 'Administrators' | 
    Where-Object Name -notlike '*Domain Admins' |
        Remove-LocalGroupMember -Group 'Administrators'