You achieve this by enable "Only allow local user profiles" in Computer Config -> Administrative Templates -> System -> User Profiles
