| Task | Completed | Notes |
|---|---|---|
| Remove user from admin groups (e.g., Domain Admins, Local Admins) | ||
| Revoke elevated permissions on all servers/systems | ||
| Disable or delete redundant admin accounts (if any) | ||
| Update access logs and document changes | ||
| Inform relevant teams and stakeholders | ||
| Review and update admin password vaults if necessary |