Hi Glenn. Thanks for the response. I misspoke (or mistyped, actually). We won't be removing the GPO but instead just remove the part that tells the GPO to place the Domain Users group in the Local Admins group of the PC. So we'll leave the GPO in place since it does other things we want to retain.

However, before doing that we need to somehow get the individual user's name, the user of each individual PC, in the Local Admin group. Should I be able to do that using your script above as a starting point? I know I need to get a list of computer names to user names for reference. Can that be done via an ODBC connector in the script or something similar?