Cant remove admin rights for 1 account that was member of domain admins, and restrticted group (built-in admins), it is not a member of aforementioned groups anymore but this account can install and elevate as admin on domain joined comps in what I used it before. new domain joined comps dont recognize him as admin and asks for elevation. Is it some sort of cache or what else? confused(