adding enterprise admins group to every workstation local admin group

[Scott]

Is it easy to create a GPO to automatically add the forests enterprise
admins group to every local admin group of machines within a domain in that
forest?

Thanks

 

[Laura E. Hunter \(MVP\)]

You can use the "Restricted Groups" setting to add Enterprise Admins to
Administrators.

Caveat: this will remove any other members of the Administrators group and
allow -only- the Enterprise Admins group to belong to the local
Administrators group. If you are in an environment where users are local
administrators on their boxen, this is not the solution for you.