You may create a mdt vbscript / batch to generate and incorporate the user to a group. Either you use the script during the TS with a command line action or simply insert an software action (for those who make an application for this activity)It looks like the command does insert the user to Administrators group as well as Domain Admin group whenev