Windows 10: What could possibly be adding a domain security group to local admin on my Windows 10 and...

I work for an MSP as an embedded technician at a municipality. Recently we began to use AutoElevate to manage administrative privileges and as a result I'm removing all local admin rights from individual users that may have previously had them. This has led me to a discovery that security groups are being added seemingly by User OU to individual machines. I'm looking to find out how this is happening but can't figure it out. Places I've checked: GPO. I have a group policy that activates the"Adminstrator" account on local machines and another that sets the password of said account, and one that

:)

 

AD Security Groups

I need to create a new Security Group in On-Prem AD

This group will be included with domain users members, and i need to exclude (domain admin group and service account group ) members.

Can you help me on this ?

 

admin rights keep disappearing!?!!

Hi guys,

I am actually having a problem at work that our IT department hasn't been able to figure out. I am supposed to be a member of the admin group. We are on a domain. The problem is that everytime I reboot the computer I loose my admin rights(no longer in the administrator group) and just become a normal user again. I have tried googling this and didn't get to many results.
I believe IT is just giving me local admin rights, not admin rights for the whole domain.

Any suggestions?

EDIT: It is on Windows XP Pro.

 

Local Admin/Domains Admin Rights ISSUE please help

So from my side as local admin group who has permission to change group policy or change/add user to active directory. So only Domains Admin could do it? It is not possible to change local admin to domains admin from local permission?
Ok so I forgot on this option. And it is possible to launch the .exe file without UAC permission? Because I succesfully installed software "mouse without keyboard" from Microsoft but after I open the launch.exe, system asked me as User to enter the admin password and name to allow changes in system. I know that UAC asking when software want to make some changes in registry or is launched from C/Program Files (software is installed there) it is any way to launch it without UAC? (option to turn off UAC is not possible)