if you want to prevent users to be local administrators you cannot do this via group policy but you can do this with scripting. If then in the future you want to avoid users putting themselves into the local Administrators group you have to:
Remove them from the Administrators group
Change local administrator’s Username (can be done via group policy) and password
If I misunderstood your needs please let me know throught the comments.