Removes all users with UIDs greater than 500 from local admin group.

RemoveUsersFromAdmin.zsh

#!/bin/zsh

# these local accounts will not be removed from admins
# one account name per line; keep the beginning and closing quotes

exceptionsList="talkingmoose
bill.smith
oszein
jamfadmin"

# list all users with UIDs greater than or equal to 500

localUsers=$( /usr/bin/dscl /Local/Default -list /Users uid | /usr/bin/awk '$2 >= 500 { print $1 }' )
echo "List of local accounts:
$localUsers\n"

# remove all but those in exceptions list from local admins group

while IFS= read aUser
do
	if [ ! $( /usr/bin/grep "$aUser" <<< "$exceptionsList" ) ] ; then
		/usr/sbin/dseditgroup -o edit -d "$aUser" -t user admin
		echo "Removed user: $aUser from admins group"
	fi
done <<< "$localUsers"

exit 0