Hi,
你可以通过Group Policy 中的 Restricted Groups 该设置来实现你想要的功能。 新建一个组策略对象>> 将其Link 到相应的OU 或者Domain>>编辑该组策略>> 打开Computer configuration\Policies\Windows Settings\Security Settings\Restricted Groups>> 右击选择Add Group, 输入你想要加入本地管理员的组, ok>>
选择 This group is a member of, Add >> 输入"Administrators" Group >>OK.>> GPupdate -force.
具体的操作步骤可以参考下面的文章:
希望对你有帮助。
Best Regards,
Elaine
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.