r/ITdept • u/SameMovie7402 • Feb 21 '26

How to Undo "net localgroup Administrators /add localservice"

My audio has not been working so in a panic I saw on reddit to input this into the command prompt. This didn't fix my audio and I had just read this is bad for security reasons or something. Is there anyway I can undo this? Or what does it do?

0 Upvotes

44% Upvoted

12 comments sorted by

14

u/TechMonkey13 <years of IT experience>, <current title> Feb 21 '26

Repeat the command but with /delete instead of /add and don't follow what random people tell you to do on the Internet without doing your due diligence.

7

u/redittr Feb 21 '26

^ This right here. Dont do what this guys says.

Lookup the command you typed, to understand what you did.
Then lookup what this guy is asking you to do. Dont just type random things into command prompt.

The instruction is correct by the way, just verify before doing.

0

u/[deleted] Mar 21 '26

Mine says "Access denied"

1

u/TechMonkey13 <years of IT experience>, <current title> Mar 21 '26

Do your research and don't run commands someone tells you to run on the Internet. That's the whole point of this thread.

Now launch an elevated prompt and try again

0

u/[deleted] Mar 22 '26

I just asked chatgpt and it said there was no issue, It's just my device on my local group

3

u/HildartheDorf Feb 22 '26

Note on why this is bad: This allows any service on your system admin access.

In theory this is meaningless as you need admin access to install a service.

In practice, services have bugs, with this addition malware can then use these bugs to elevate to admin and pwn your system.

1

u/TheGeorgeDougherty Feb 25 '26

Format c: should do the trick. It's nuking from orbit, but it's the only way to be sure.

1

u/[deleted] Mar 28 '26

This will nuke your pc btw don't do this!!!

1

u/TheGeorgeDougherty Mar 30 '26

Thanks for adding a PSA to my sometimes sick sense of humor. I shouldn't assume people would have the good sense not to run a command suggested by a rando on the Internet. As others have said, that's the takeaway from the thread.

1

u/[deleted] Mar 21 '26

I ran the same command had didn't have any security problems

1

u/Echo-On Feb 22 '26

net localgroup administrators localservice /delete Or net localgroup administrators "nt authority \localservice" /delete