I was able to do this with out a script. What I did was in
configuration used the template group management. Then modify group.
The group name would be administrator (or what ever group you want to
change) then next to remove member change drop down to domain user then
just add the user you want to remove. See my screenshot.
Note if the pc is currently not inside your network it will not work.
Note if the pc is currently not inside your network it will not work.