Local administrator permission for domain user

How to give local computer administrator permission for users in domain.

I.E. ; Normally domain users cannot change control settings, modifications in c drive and windows, cannot install applications. But some organizations need this. For this do as follows.

Edit the Default group policy (or any group policy you are willing to link with the certain ou)
Go Computer Configuration > Policies > Windows Settings > Security Settings
There right click on Restricted Groups and click on Add Group
Click Browse, type Domain users (Or any other user group you are willing to add locally in their administrators' group) and click Check Names.
Click OK twise.
Click Add under “This group is a member of:”
Add the “Administrators” Group.
Add “Remote Desktop Users” (Adding remote desktop group is for give them the ability to do remote desktop. If you dont need this to your domain users forget this.)
Click OK twice