Remove the Domain Users from the local Users group, and add only thier account. This is done locally, not through AD or GPs.
Some results have been hidden because they may be inaccessible to you
Show inaccessible resultsSome results have been hidden because they may be inaccessible to you
Show inaccessible results