Hey All,
I want Domain Admins group to be member of local admin group on all user computer.
I thought of doing this through Restricted Group section in GPO, I modified the Default Domain Policy, Under Computer Configuration -> Security Settings -> Restricted Group -> Added Domain Admins member of Administrators group.
After few mins, automatically all the members in "Domain Admins" group got removed and i totally lost control of my AD Infra.
Luckily i have another account which has modify permission of the Domain Admin group through which i manually added the members again and got the control back.
Any idea why this happened?
Regards,
Prasanna