Ok. To make changes to the local Administrators group, the person making the change has to have Administrator permissions.
That means:
1) If the user is in the Administrators group, you can easily add the Dom\Administrator account and remove the user account in a Kixtart logon script (as the user). there are code samples in the links I mentioned previously that will get you very close to what you need. In the script I provide in one of the links you simply need to add "$group.Remove(@UserID)" to remove the user account.
2) If the user is not an Administrator, the logon script will not work for you at all unless you can use SU.exe or Runas.exe. In this case, you will ether need to have another DOM\account that has Admin permissions or use the local adminstrator account. If you have access via a Domain account you can use ADSI to target the remote computer or use a Perl Compiled utility AddToAdmin.exe from my Perl Utilities Web Page.
If you give the coding a shot, many of will review and point you in right direction. No one likes to write solution for others without compensation but we do like to assist.
