Mark,

Bryce also wrote a UDF to remove everyone from the local Admin group except the accounts you approve. Keep the person logging in if found already, and your Domain Admins and any other accounts you want, then remove others. Just be careful you know all the variables involved with this type of script.