I think you need to look into Restricted Groups GPO in your Group Policy.
With restricted groups you prescribe group membership. For example: you
could prescribe who is member of local Admin group on your workstations,
without doing this manually.
--
Regards
Matjaz Ladava, MCSE (NT4 & 2000), MVP
(e-mail address removed)
http://ladava.com