I followed the steps mentioned here
also here
http://www.youtube.com/watch?v=G7ROD2pgXd4
the problem is that I can see the group added to the domain admins group, which not what I want
I want the group I created "desktop admin" to be only added to the local amdin groups on the client machines