I would love to send a Unix command through ARD that will change a OS X admin user to a standard user. The only thing I found close is

sudo dscl . -delete /Groups/admin GroupMembership USERNAME

which does remove the user from the list of admins, but they are still listed as an admin in the user preference panel, and can still use their account to authenticate for admin privileges.

migrated from stackoverflow.com Oct 16 '13 at 14:10

This question came from our site for professional and enthusiast programmers.

  • This belongs on AskDifferent (not one of the migration flag options). – Richard Sep 11 '13 at 2:45

Just fought this battle, you can drop the dscl line and use the following;

Type the command

sudo dseditgroup -o edit -d UserName -t user admin 

Where UserName is their actual AD username.



I have done the below command, it is working fine

sudo dseditgroup -o edit -d UserName -t user admin 

We're looking for long answers that provide some explanation and context. Don't just give a one-line answer; explain why your answer is right, ideally with citations. Answers that don't include explanations may be removed.

  • 1
    How does this improve or differ from the other answer? – Mark Feb 26 at 12:10

You must log in to answer this question.