Is there a good way to solve the following?
- Domain has an AD security group called "Workstation Administrators", for users that should not be domain admins, but should have local administrative control over all workstations in the domain
- Technicians frequently forget to manually add this group after joining a PC to the domain and wastes time later on having to diagnose, go back and do it
Anybody know an automatic way of adding this group, or running a script on domain-join? Or would we need to run an automated audit process every so often after the fact?