This article shows how to disable local administrator account using GPO on a Windows 7 machine.

  1. Open gpmc.msc
  2. Go to Group Policy Objects (GPO)
  3. Right click on GPO and select “New”gpo1
  4. Give a proper name of that GPOgpo2
  5. Go to Computer Configuration > Preferences > Control Panel Settings > Local Users and Groups > Local Usergpo3
  6. Select Local User
  • Action : Update
  • User name : Administrator (built-in)gpo4

7. Link that policy on Computers OU

8. Once the policy is refreshed next time, the local administrator account will be disabled.