Blocked User to "Add workstation to domain"

I want to blocked User to "Add workstation to domain"

I try it in Local Security Policy\Local policies\User Rights Assingment\Add workstation to domain

and I can't change nothing can't add and can't remove

It's "Windows Server 2012 r2" and I have permission "Domain Admins"