I need to get a little help in tuning my Active Directory. I would like to be able to give the right of 'local administrator' to a group of users already defined in AD. This is in order not to have to log on to each machine and assign local administrator rights one by one to each user needed.
Personally I would use Group Policy Preferences to achieve this:
I would recommend using a computer policy, configured as follows:
Action: Update (This is important, if you use replace you will remove anyone currently in the group)
Group Name: Administrators (Built-In)
Rename To: [Leave Blank]
Description: [Leave Blank]
Delete All Member Users: [Unselected]
Delete All Member Groups [Unselected]
Members: [Add specific AD users and groups here]
If you're new to Group Policy Preferences, I'd recommend getting familiar and learning about some of the new terminology. Despite being part of Group Policy, they're very different to old Group Policy settings.
Here's a good place to start: