Question : Local Admin Group at Domain Controller

Hi,

1. In one of a company
2. A consultant created a "local Admin Group" at the Domain Controller (Active Directory Environment)
3. A Security Administrator is responsible to give this "Local Admin Group or Permission" for an employee who has to install a software; this permission is usually given to an employee for 5 days and after that the administrator will take it back.
4. My Question: i) How to CREATE this Local Admin Group at the Domain Controller (It is at Group Policy Object or What? I believe that It should be at AD Users and Computers), ii) Give me the STEPS please, iii) How to add or remove a user to this group? is it easy?
5. Thank you

Tjie

Answer : Local Admin Group at Domain Controller

Hi tjie
   "It is at Group Policy Object or What? "
    It is an Active Directory object like a user account, computer account
   "I believe that It should be at AD Users and Computers"
     You are right. When you open AD users and comps, in left pane, either
      *Right-click on the OU or container you want the group to be created in, click New>Group.
      or
      *Click on the container or OU in left pane, then right-click empty space in right-pane, click New>Group
     Then choose "Security Group" specify a name and you are done.
     You can double-click that group in OU or container and add members to this group in "Members" tab

Regards