Keep reading to see how you can solve some of them with Group Policy Preferences. This works, but has a few pitfalls as you’ve probably run into once in a while.
There is a lovely security setting that has been around for many years, Restricted Groups, which can be controlled via local security policies of via GPO. One of the issues that data center or even any Windows Administrator has is managing the local administrators group on each and every one of their domain members.
