I would love to send a Unix command through ARD that will change a OS X admin user to a standard user. The only thing I found close is

sudo dscl . -delete /Groups/admin GroupMembership USERNAME

which does remove the user from the list of admins, but they are still listed as an admin in the user preference panel, and can still use their account to authenticate for admin privileges.

  • This belongs on AskDifferent (not one of the migration flag options).
    – Richard
    Commented Sep 11, 2013 at 2:45

2 Answers 2


Just fought this battle, you can drop the dscl line and use the following;

Type the command

sudo dseditgroup -o edit -d UserName -t user admin 

Where UserName is their actual AD username.



I have done the below command, it is working fine

sudo dseditgroup -o edit -d UserName -t user admin 
  • 3
    How does this improve or differ from the other answer?
    – mmmmmm
    Commented Feb 26, 2019 at 12:10

You must log in to answer this question.