Group Policy on Read Only Network Identification

[Steve]

In the system properties I would like to write a group
policy so users cannot change their Domains to
Workgroups. How can a group policy be setup so it
restricts all users but not admin?

 

[Steven L Umbach]

That is already the default setting. Only users in the local administrators group of
a domain computer can unjoin it from the domain. You may also want to look into using
restricted groups to enforce membership of the local administrators group on domain
computers. --- Steve