I followed the link: https://blogs.technet.microsoft.com/dougga/2011/09/12/managing-client-machine-local-admin-rights/ to create a gpo policy but somehow the first part which is the list of members that should always have local admin rights is not working. Only built\administrators is the only group that can be added in. But if I have the second group enabled, then besides computername is added, all the other groups I specified will be added as well.
Any advice on the first group?
Thank you very much!