title: Access denied adding domain user to local administrators group
body: <p>When adding a domain user to the local administrators group I receive an access denied, this worked before and now sadly and strangely it no longer does.</p>
  
  <pre><code>$user = "mydomain/user"
  $group = [ADSI]"WinNT://./Administrators,group"
  $group.Add("WinNT://$user,user")
  </code></pre>
  
  <hr>
  
  <blockquote>
    <p>Exception calling "Add" with "1" argument(s): "Access is denied.
    "
    At C:\test\Untitled5.ps1:3 char:1
    + $group.Add("WinNT://$user,user")
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : NotSpecified: (:) [], MethodInvocationException
        + FullyQualifiedErrorId : CatchFromBaseAdapterMethodInvokeTI</p>
  </blockquote>
  
  <hr>
  
  <p>Logged on as a domain administrator</p>
  
  <p>Same error using the PowerShell ISE or the console</p>
  
  <p>Yet, I am able to add the user through the Computer Management MMC snap-in, no problem.</p>