windows-imaging-tools-builder/resources/managed-admin-policy.json

{"disable_extra_admin": true}