I added the "unauthorized administrators" report on my dashboard but many of the admins that are in the list are actually authorized (local.admin, domain admin etc.). I do see some that are my users so it's actually good that they are there, but how do I remove the authorized ones from that list? anywhere I can whitelist them?
Go to Configuration > User Pages. There you will find a section labeled "Allowed administrators." Just add the users to the list. If you have a local user (non-domain) on the machine just add the machine name; if the same local user account exists on multiple machines, use '%' as the computer/domain name.
So if I have local.admin on many of these computers, how should I be adding this to the allowed list? What should I be writing in the "Domain or Computer" field and what should I be writing in the "administrator account"?
Go to Configuration > User Pages. There you will find a section labeled "Allowed administrators." Just add the users to the list. If you have a local user (non-domain) on the machine just add the machine name; if the same local user account exists on multiple machines, use '%' as the computer/domain name.