that's what windows does when you add a computer to a domain.
Builtin 'Domain-Admins' will be added to the local 'Administrators' group
and 'Domain Users' are added to the local users group.
I think you need to look into Restricted Groups GPO in your Group Policy.
With restricted groups you prescribe group membership. For example: you
could prescribe who is member of local Admin group on your workstations,
without doing this manually.
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.