none
how restrict local administrator rights

Answers

  • Hi,

    In my opinion, there is no built-in way to achieve your goal that restrict local administrator to dis-join domain for computer.

    But you could use Restrict Group to restrict the member of local administrators group.

    For more information, you could refer to the article below.

    Restricted Groups

    https://technet.microsoft.com/en-us/library/cc785631(v=ws.10).aspx

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, May 03, 2016 1:53 AM
    Moderator