Changing passwords, or deleting local accounts in AD?

Question

Active Directory

Hello, we are entering AD, but there is a problem, a whole zoo of local admin accounts, and others. And many with different names.

Can I somehow filter them out and either delete or change all passwords?

Or maybe you can just collect the passwords of local admins - in one file

Answer 1

Correct Option
1. Install and configure LAPS on the infrastructure to obtain temporary administrator passwords on machines.
2. Remove members of the local Administrators groups via GPO, leaving only the built-in Administrator.
The second option is to perform any necessary operations through Powershell - collect lists of group members, change group membership, etc.