#!/bin/sh
# Erstellt am 21.11.2017 / Peter Hasselbach
# Edetiert am 12.02.2019 / Andreas Vogel
# Quelle: JAMF Nation

adminUsers=$(dscl . -read Groups/admin GroupMembership | cut -c 18-)

for user in $adminUsers
do
if [ "$user" != "root" ] && [ "$user" != "jamfMA" ] && [ "$user" != "ladmin" ] && [ "$user" != "locadmmac" ] && [ "$user" != "cls_mac" ]
then
dseditgroup -o edit -d $user -t user admin
if [ $? = 0 ]; then echo "Removed user $user from admin group"; fi
else
echo "Admin user $user left alone"
fi
done