I'm looking for a way of clearing the "add workstation to domain" right from existing accounts. I found some info on Revoke-privilege commandlet but can't see it available in v5. Where this is to be implemented I have no access to Internet so can't use the ntrights app that may still work for Server 2016. What would be other way of doing this on a fairly big number of machines not through a GPO?