We current have a Windows script that will be placed on a re-image and
it will be the last script we run. This script then will create a local
admin account for the next AD user who logs in first. I have found
several options to create AD local admin...