dears,
i need some assistance with below 2 options:
1) i have an active directory 2016 and i need to disable the network discovery for all domain users. is it feasible? my users have windows 7 8 10.
2) i created by gpo long time ago a local admin for all the domain pcs. however, some users with domain account permissions created for some users their own local admin users on their devices. and i do not need that, i need to deny all the users from signing in using the local admin of their devices and i can't at the moment monitor how many users are doing that.
by using gpo, i can disable the local admin already created by gpo, but how can i disable all the other users?
best regards,