+ 0 Votes On the local PC Churdoo 6 years ago There should not be local user accounts. There should be the local Administrator account which should have a non-blank password known only by network admin(s), and that's it.Remove all local accounts from the PC's, make sure the local guest account is disabled, reset the local admin password, and don't give the users local admin access to their PC's. + 0 Votes Local accounts p.j.hutchison 6 years ago churdoo is correct. You can reset the admin password on all PCs to a one you know only by running a startup script (or preferably an .exe program) to auto change the administrator password. + 0 Votes I agree but also... Alfa11 6 years ago You can apply a GPO that avoids users from logging locally on the PCs.