recently we have had to remove domain admin permissions from our technical staff, we have given them local admin permissions and can add machines to the domain. but they are dependant on group policy and regularly have to login in as local admin and gpupdate /force.
is there another group or setting that be edited so they can go straight in and do their job.
