You have several users who have local administrative access to their computers. Some of these users are changing certain policies that shouldn't be changed for security reasons. You don't want to take away their local administrative access, but you want to be sure that these important policies are reapplied to computers if a user changes them. What can you do?

As you can see, there are several users, who have local administrative access to their computers, and there are some policies which should not be changed for security reasons, So in this context, you have two options;

* Either apply authorization for access of particular policies, so only authorized uses can change policies.

* Or you can apply check on changing of certain policies, like if one fixed range of people change the policy it will allow otherwise if other user try to change it, it won't allow.