Give Local Admin privileges to AD user group for group of computer
Solution 1:
Yes, you're after Restricted Groups.
- Create a new GPO for the OU of your workstations.
- Computer Configuration -> Windows Settings -> Restricted Groups
- Right click, Add Group
- Choose your group for users who are going to be local workstation admins
- This group is a member of -> Add, and enter Administrators
Exit out of the GPO, and run gpupdate /force on the workstations to pick up the new GPO. Check in the local users/groups to see if your admins group is in the local administrators group.
See here for more pics: http://myitforum.com/cs2/blogs/rdixon/archive/2008/06/17/how-to-add-domain-accounts-to-local-administrators-group-using-gpo.aspx