if you have removed the user account from the domain admins security group and he is back into the group please check with your colleagues. The account will not automatically be added to the group, except you run scripts that make accounts member of
Maybe you have to enable logging on the DCs OUO and check the event viewer who is changing the group membership.
Microsoft is conducting an online survey to understand your opinion of the Technet Web site. If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.