Recommended Techniques for Adding or Removing a user's admin rights

All,

We are in the middle of transistioning from DS 6.9 to ITMS7.5 and was wondering how everyone remove's or add's user's admin rights.  Now I may be showing my newness with the new management console but I didn't see an easy or automated way to complete this out of the box.

We use to just run a simple script that used the DS token, see below for an example.

net localgroup administrators %#express!computer@logged_on_user% /delete

Finding using these variable in the new system to be a bit more difficult and honestly it would be nicer to find a better solution or hear how others are doing it.

Any suggestions or recommendations are greatly appriciated.