Step 1 : Creating a Security Group
First you need to create a security group called Local Admin
Next you need to create a group policy called “Local Admin GPO”
Step 3: Configure the policy to add the “Local Admin” group as Administrators
Here you will add the Local Admin group to the Local
Admin GPO policy and put them in the groups you wish them to use.
In the Add Group dialog box, select browse and type Local
Admin and then click“Check
NOTE# When adding groups, you can add
whatever you want, the GPO will match the group on the system, if you type “Admins” it will match a local group called Admins if it exists and put “Local Admin” in that group.
Step 4: Linking GPO
Step 5: Testing GPOs
Log on to a PC which is join to the domain and then run gpupdate /force and check the local administrators
group. You should see Local Admin in that group now. Make sure all PCs you want to access should be move to an OU and properly link above GPO. Tom
and Bob domain users can now access all PCs remotely as a local administrator.