To disable changing Display, go to MMC>Local
Computer Policy>User Configuration>Administrative Templates>Control
Panel>Display.
How to disable domain group policy
You may have many options to disable group policy. you can
disable
the use of group policy objects on the local computer by changing the
Registry. Please refer to this post for more details:
How to: disable group policy
You
can also disable a Group Policy Object Link. For example to disable a
policy in domain controller, please follow these steps:
Open
Active Directory Users and Computers.
Right-click the site, domain, or organizational unit to which the Group
Policy object is linked. Then click Properties.
Click the Group Policy tab.
4. Right-click the Group Policy object link that you want to disable, click
Disabled, and then click O to apply.
By the default, Administrators, Backup Operators,
Power Users, Users, and Guest are assigned rights to log on locally on
workstations and servers; Account Operators, Administrators, Backup Operators,
and Print Operators are assigned rights to log on locally on domain
controllers. To prevent some users to access a computer, go to MMC>Local
Computer Policy>Computer Configuration>Windows Settings>Security
Settings>Local Policies>User Rights Assignment, remove the Users and add a
user or groups who are allowed to access to the computer.