How to create a local admin account on all machines in an AD domain?

Question

Active Directory

There is an Active Directory domain on MS WinServ16.
It is necessary to create a policy using the GPO so that a single local Administrative account is created on all devices in the domain.
Is there such a technical possibility, and how to implement the plan?
Thanks to!

Answer 1

use LAPS: Manage Local Administrator Passwords...

Answer 2

There is no standard functionality in the GPO for this - only a startup script if.
The idea is stupid from a security point of view.
Use LAPS to access local administrator passwords.
Or an AD service account with adding it to the local administrators group.

Answer 3

A typical task, googles at times .