Corporate Group Policy Changes System Settings

avg business, The AVG (SMB) support in the UK (http://forums.avg.com/ww-en/avg-forums.tpl-stdfull?sec=thread&act=show&id=190509) will probably be dealing with your query.
AVG Guru

Note that someone from AVG has posted a reply on the old AVG forum which had a link to a Microsoft Technet article. None of the suggestions in that article are available as my Win7Ult does not have any such menu options in Administrative Tools.

Windows 7 (32 bit) Ultimate SP1
AVG Internet Security Business Edition 2014 (updated as of Apr 26 version)
No other firewall or antivirus
Tuneup Utilities 2014
Microsoft Office 2013
Directory Opus 11.2

Problem(s) and Question(s):

System is setup in a corporate active directory environment with a domain account logon for the purpose of using only the firewall.

The system runs Outlook 2013 with a connection to a corporate mail server running MS Exchange.

I am always logged in with my domain account, always running Outlook 2013 and wish to prevent a logoff, reboot and anything that would change my desktop and system settings.

How can I prevent domain GPO objects or remote domain admins from making changes to system registry, administrator accounts ?

I have disabled File and Printer Sharing, have only 3 defined domain admin logons as administrators and using 1 of these accounts to run. Each of these 3 accounts belongs to me.

Remote connection to system have been disabled in System, Properties, Remote Assistance (Unchecked), Remote desktop (Dont allow).

I wish to keep the system "frozen as it is" and not have to worry about some modification being pushed. Windows Updates are also set in Manual mode and I check these once weekly and update as needed.
As of Apr 26 all current updates are installed.

Tried looking at Firewall, Advanced Settings but after seeing the long list of protocols, did not know which ones I could try to change to prevent GPO objects from making registry changes.

Yesterday the system was somehow modified where my domain account was removed as administrator and I had to redefine it using a localmachine admin login and add back my default domain account as one of the machine administrators.

Looked at the log and saw a long list of blocked Incoming (IGMP?) items but could not determine a clue from those to somehow expand a new rule for firewall to prevent system changes.

There is also the option of Start, Run, gpedit.msc but have not made any changes that way to system defaults (but am willing to if needed).

If I knew which protocol or service could be disabled or blocked, I am sure AVG can do it, just need a little help.

Thank you.

avg business, The AVG (SMB) support in the UK (http://forums.avg.com/ww-en/avg-forums.tpl-stdfull?sec=thread&act=show&id=190509) will probably be dealing with your query.
AVG Guru