baanjaiFree guide · For Internal ITSee it on your fleet
The Local-Admin Offboarding Playbook
Remove standing local admin across your fleet in 30 days — without a helpdesk revolt.
What’s inside
- The exact PowerShell to inventory every local admin across the fleet
- How to build the approval off-ramp before you cut — so there’s no ticket flood
- Which enforcement to use: Group Policy Preferences vs Restricted Groups vs Intune
- A 30-day rollout cadence, comms script, and the report that proves “who has admin, and why”
Information is free. Implementation is paid.
Want the shortcut?
The playbook works by hand. Baanjai automates the hard parts — request-to-approve elevation, endpoint hardening, and the who-has-admin proof screen — from one place.