If not, is there any way I can achieve that?
Any feedback will be highly appreciated.
You can not prevent local admins from doing anything on their local machine.
--Joe Richards Microsoft MVP Windows Server Directory Serviceswww.joeware.net