Grant Local Administrative Privledges on Log On and Remove on Log Off

Good Afternoon:

I am studying for my 70-640 and trying to get clarification on an item.  I am reading that based on GPO "Preferences" You can configure a GPO to grant a user/users rights to the local Administrators group via when they log on to the machine, and this is stripped when they log off.  I would think this is based in the GPO settings under

CC-Preferences-Control Panel Settings-Local Users and Groups

Then add the group and configure here.  Can anyone give me insight how this can be achieved, I could not find anything on technet.  Any help would be great!