how to grey out Cisco anyconnect preferences

[ncisprobie]

How do i make these checkboxes greyed out to avoid users from editing them 

I have seen that the changes are saved to the preferences_global.xml (example shown below) and have set every Usercontrollable value to false in our VPN profile

<?xml version="1.0" encoding="UTF-8"?>
<AnyConnectPreferences>
<DefaultUser></DefaultUser>
<DefaultSecondUser></DefaultSecondUser>
<ClientCertificateThumbprint></ClientCertificateThumbprint>
<MultipleClientCertificateThumbprints></MultipleClientCertificateThumbprints>
<ServerCertificateThumbprint></ServerCertificateThumbprint>
<DefaultHostName>contoso.com</DefaultHostName>
<DefaultHostAddress>10.10.10.10:100</DefaultHostAddress>
<DefaultGroup></DefaultGroup>
<ProxyHost></ProxyHost>
<ProxyPort></ProxyPort>
<SDITokenType>none</SDITokenType>
<ControllablePreferences>
<LocalLanAccess>true</LocalLanAccess>
<DisableCaptivePortalDetection>true</DisableCaptivePortalDetection></ControllablePreferences>
</AnyConnectPreferences>

Is it possible to set the preferences and grey out the check boxes

[alemabrahao]

I'm not sure, but I think that It's possible If your machines are In a Domain Controller like AD.

[ncisprobie]

so could you grey out the options using gpo or.....

[alemabrahao]

Yeah, I think using a GPO is the way. I don't have experience with GPO, but I think that is possible.