I want to be able to edit the values of a Windows security setting to not have a particular user. For example lets say I wanted the LOCAL SERVICE and NY AUTHORITY values removed from "Change the system time" setting. If I packaged this up and set the action on the Change system time to delete (says modify in image) and deployed to a server with NT AUTHORITY/LOCAL SERVICE/ADMIN would this delete the value and leave ADMIN in the setting? Or delete the entire setting values included?
Currently unable to test.
Tested, and it works as expected.