You manage 20 windows workstations in your domain network you want to prevent the sales team members from making system changes whenever a change is intitated you want to allow only those who can enter administator credentials to be able to make the change what should you do?