I do not want the Domain Users group to be automatically added to the local "Users" group when a computer joins the domain, but am struggling with finding how to prevent this.
The reason for this is I need very strict control over who can log into what computer and I want to explicitly assign what users or groups get assigned where.
Any suggestions? The domain and forest functional levels are 2012 R2.