We have a requirement for a tool to need local administrator access to all systems in the domain (security scanning tool).
Here are the steps taken so far:
- Created an account
- Added the account to a group called "Security Administrators"
The question we have is how do we add this group to the local "Administrators" group on all systems.
The sysadmin tried adding this to the default policy, but it ended up wiping out the existing users from the local "Administrators" group.
How can we add the account to local "Administrators" without overwriting the other accounts?