I am trying to find out why an AD computer object would be a member of the local administrators group. This is obviously populated via GPO because the AD administrator removes the account, but it returns immediately. Has anyone else seen this? Is there a reason this was done, or does it serve some purpose? Finally, is there an easy way to identify how to remove it?
Thank you very much
Bill