I applied a lot of restrictions, but when I tested my client the normal user could still use the MMC and tamper with local accounts and some policies. This article provides the path to the policy and other possible restrictions to apply.
https://technet.microsoft.com/en-us/library/cc709697(v=ws.11).aspx

Last edited by jgaribay (3/09/2017 8:56 am)