How to prevent Domain Users group from being added to local Users group

view full story

http://serverfault.com – I do not want the Domain Users group to be automatically added to the local "Users" group when a computer joins the domain, but am struggling with finding how to prevent this. In the default domain policy under User Configuration - Preferenaces - Control Panel Settings - Local Users and Groups, I added a group called "Users" with an entry "domain\Domain Users" with action of "Remove", but that did not do anything. Any suggestions? If it matters, the domain and forest functional levels are 2012 R2. (HowTos)