We need to temporarily give everyone on our network local admin rights on their computers. Previously, we manually set up everyone as a Standard User on their computers. Recently, we created a Group Policy under Computer Configuration-->Windows Settings-->Security Settings-->Restricted Groups that makes Domain Users members of the Administrators (built-in) group on the local computers. But the users are still not able to run updates or install software on their own. I'm wondering if the manually configured Standard User setups are overriding the GPO. Is there a way around this? We're running Windows Server 2008 R2.