batch to change members of local admin group?

[twikoff]

anyone know of a way to do a mass change of members in a local admin group.. actually, it would be better if we could just remove a specific group from the local admins group..
a former employee seems to have put the everyone group in as a local admin on the machines he setup.. and we didnt notice before.. but it appears to be causing a big virus issues (not to mention the security problems that would cause).. but there is no way of individually tracking down each machine he worked on, so I want to see about running a batch to change them all.
i know we can do alot of these types of tasks with hyena.. such as changing everyone's local admin pw at the same time.. but havent found a way to do members of the local admin group?

[X]

What OS?

You could use ADSI/WinNT routines in VBScript or JScript. Then centrally distribute to each workstation.

[twikoff]

if we could hit at least all the 2k machines, it would be fine
also getting nt4 machines would be great, but that would most likely be more difficult

[X]

Yeah, then you can do them all using WinNT calls on the workstation run from a script. You might have to add and register ADsSecurity.dll to the NT machines though.