Just wanted to know if a domain user is given admin rights can I restrict them from creating new local users on that pc through group policy. I have had a domain user who needs admin rights create a new local user on the pc. Therefore all the group policy changes made by me on the dc arent applied to his new local account. Hope that made sense, I appreciate any feedback, thanks.