You can remove privileges from an Active Directory group by removing the role that was assigned to the group.
If only one group is assigned the Administrators role, you cannot remove that role since at least one administrator must be configured at all times.
Note:
If you remove a custom role that is assigned to a group, you are only removing the assignment of the role and not the role itself.