Is there a possibility to disable Add-LocalGroupMember -Group “Administrators” -Member “user123” on a windows 10 machine
Didn’t get your question. Is it about making the cmdlet not available ?
Correct, making the cmdlet not available ?
You hero here will be JEA and is well documented here.
How can I make that the cmdlet Add-LocalGroupMember is unavailable in PSRoleCapabilityFile ( psrc file )