Is it possible to remove domain users from Local Admin group on Computers (with DC)?

Dmitry