This tutorial will show you how to use the GPO Restricted Groups to add IT support technicians into the local administrator group of all PC's the policy is applied to. Using Group Policy to add users to the local admin group is a safer and better practice than providing domain admin privileges to technicians that do not have the need or experience to be working beyond the workstation level.
1.Define Security Group
First you need to define a security group in AD users and computers. In this example I am creating a security group called IT_TechRead full article...