Local user deny in Active Diretory

Question

Hello.
i find docs (https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/appendix-h--securing-local-administrator-accounts-and-groups)
i want to apply that.
but i have 100 more local account.
How can I organize it efficiently?

Answer 1

Hi，
Based on my research, we don't need to do this for all he local accounts.
We did this to protect the local administrator account.

Or if you do need to do this, you can add the local accounts into a group.
Then you can use the GPO to deny the rights to the local group.

Best Regards,

Answer 2

can i register group "Administrator"?
i register "Administrator" but system occur Error
So i do not there ㅠ.ㅠ