Without trying to drill down through every policy in GP, can anyone tell me how I can restrict users from disjoining the domain and adding themselves to a workgroup? Thanks in advance!
If you don't mind hiding the entire Control Panel from your users, you can go to User Configuration\ Administrative Templates\ Control Panel, and Enable "Prohibit access to the Control Panel."
Alternatively, at the same location you should be able to hide just the system applet.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.