These policies generally are meant for just computer or user settings. This script will disable the empty settings (for example, if a GPO has only computer setttings, it will disable user settings). This is important
Add a user account to the local Administrators group : The following powershell commands add the given user account to local Admin group. $user = “ComputerName/user1”; $group = “Administrators”; $groupObj =[ADSI]”WinNT://./$group,group” $userObj = [ADSI]”WinNT://$user,user” $groupObj.Add($userObj.Path)