How to secure Domain Admins and Enterprise Admins security groups

Learn how to secure the Domains Admins and Enterprise Admins security groups in Active Directory and stop members of those groups logging into member servers and workstations. In this example, I show you how to use group policy to set the 'Deny access to this computer from the network', 'Deny log on as a batch job', 'Deny log on as a service', 'Deny log on locally', and 'Deny log on through Remote Desktop Services' options which will stop members of the Domain Admins and Enterprise Admins security groups from logging into member servers and workstations as well as running services and applications on those devices.

Securing Enterprise Admins on Microsoft Docs: https://learn.microsoft.com/en-us/win...

Securing Domain Admins on Microsoft Docs: https://learn.microsoft.com/en-us/win...

Managing Local Administrator Accounts:    • How to manage local administrator acc...  

Delegate Active Directory Permissions:    • How to delegate control of Active Dir...  

Hi, I’m Danny, a London based IT consultant and sporadic blogger. You can view all my blog posts at: https://www.dannymoran.com