A Provisioning Policy includes the following:
- Users that can be provisioned
- Groups that can be provisioned
- Provisioning interval
When you apply the Removing Administrator Rights Policy, after the initial removal of Administrator Rights, the interval should be anywhere between 1 to 7 days (if the end user is not an administrator). However, if the end user is an administrator, after the initial removal of Administrator Rights, the interval should be much shorter (anywhere from 30 minutes to 4 hours). To ensure that the removal of administrator rights occurs, validate the policy by going to Local Administrators Reports .