I tried applying a setting for UAC via local group policy but the setting can be changed by an end user that has has admin rights to the machine by going through the Action Center. How do I lock down the UAC setting so it gets grayed out? Will the lockdown occur if it is set at the domain level?Thanks