Window Server remove local admin rights
Active Directory Users remove rights
Group Policy