Active Directory and group policy. Filter the policy to prevent it from applying to administrators. Local policies apply to all users who log on to the computer, so that's not the best option. However, you could define this policy using local policy and then prevent administrators from reading it by changing the ACL (Access Control List) on C: | Windows | System32 | GroupPolicy.
Dig Deeper on Windows client management
Related Q&A from Jerry Honeycutt
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.