nave 0 Report post Posted October 30, 2018 hello folks, I worked in A small company , we have like 100 employees that all are under A group that called "all_employees" , I need to find A way to insert every employee domain user to his local administrator group on his own laptop. so I've been thinking about A GPO that can insert the group "all_employees" to the local "administrators" group on every laptop but the problem I come across (when I presented the idea to my team leader) is that every employee will have A full administrative rights to all the computers in the company. I need to have A way that every employee is just an administrator on his own local machine. Quote Share this post Link to post Share on other sites