3 ways to add a domain account to the local administrator group by using Group Policy