https://www.petervanderwoude.nl/post/managing-local-administrators-via-windows-10-mdm/