HOWTO: Add a Local User to Windows 10 Using Group Policy (Add it To Local Administrators Group)

Since there are some outdated information about this topic, I’m going to give the steps necessary to create a local user to a Windows 10 machine using AD Group Policy, and then add this user to the local Administrator group.

First, create a new policy using Group Policy Management Editor and follow this screenshot:

Next, click on New and select Local User. In the Action field, select Update. For the other fields, select the options you need.

Click OK button and that’s basically how it’s done.

Next, I’m going to assign this user to the local Administrator group. I will be using the same group policy to achieve this.

Right-click on Restricted Groups and then click on Add Group…

Next, you’re going to type the username we created in the previous step.

I always find this misleading, but just make sure you local username account we created previously

Click OK to go to the next crucial step. You’re going to a work with This group is a member of section and click Add button

Next, type Administrators and click OK

The properties should look like the following screenshot

That’s all there is to it.

Forcibly Remove Dfs Nameserver

The following steps can be used to remove a Dfs nameserver that no longer exists in your environment.

1. Log on to a Dfs server
2. Open an elevated command line
3. We’re going to use dfsutil with the following parameters: dfsutil diag unmapdomroot \<domainname><DFSname> \<DFSrootserver><DFSshare>
   1. As a sample: dfsutil diag unmapdomroot \\DfsRootName\DfsFolderName \\Server_to_remove\DfsFolderName
4. No need to reboot just wait for replication