https://evotec.xyz/de/tags/adsiEvotec Main Websitehttps://evotec.xyz/de/blog/removing-user-from-local-administrator-group-based-on-data-stored-in-active-directoryWe need to deal with a group names through SID’s rather than names because each group name is different in different languages. The second problem is to distinguish whether a user is a local or domain user. Finally, I need to connect to Active Directory to verify if the user I am about to remove has ExtensionAttribute10 (or any other field in AD) filled in or not.Sun, 17 Nov 2019 21:09:21 GMThttps://evotec.xyz/de/blog/removing-user-from-local-administrator-group-based-on-data-stored-in-active-directoryactive directoryadsipowershellpowershell 2.0windows 7