During a company-wide initiative to harden network security, it is discovered that end users who have laptops cannot be removed from the local administrator group.
Which of the following could be used to help mitigate the risk of these machines becoming compromised?

A.
Security log auditing

B.
Firewalls

C.
HIPS

D.
IDS