
amigus |
You can also use the “Restricted Groups” settings in the “Security Settings” of a GPO or local machine security policy to forcibly set the members of local groups. The KB article in the previous post achieves roughly the same thing but using the approach above does not require runnings start-up script.

TeslaGuy |
Keep in mind that Restricted Groups is destructive by nature. What that means is if you had group membership in the local ADMINISTRATORS groups of several computers in your environment, they would be wiped out and just those groups defined in the Restricted Groups would be replaced in it.
If you want to retain existing group membership, yet still add the Domain Admins group into the local ADMINISTRATORS groups, you should use a script. Check out SCRIPTINGANSWERS.COM or other similar web sites for some scripts that you can use.

MithunMCSE |
Hi Guys
Thx for the response tho i m aware of all the above replies. But could someone pls tell me the step by step method.
Thx
Mithun Kanji