It wasn't Computer Management, it was Computer Configuration, the main branch above User Configuration in your screenshot that I changed. And I would like to do it domain-wise, instead of having to walk around to all the computers to disable it...

Stig