We have an Windows 2003 Ad server & users
and all servers are connected with domain and based on the project requirements we are enabling the local admin privilege to AD user which they are misusing for the evaluation software installations and creating the every one shares which is really threat
to the company hence we need to restrict with admin privilege..