By default, when a computer is added to the domain the Domain Admins group is added to the local Administrators group on the computer. Is this configurable? Can I specify additional groups to be added to the local Administrators group when a computer is added to the domain?