dsconfigad -groups “DOMAIN\localadmingroup,DOMAIN\Domain Admins,DOMAIN\Enterprise Admins”

This is the command I run in ARD. Run as Root.  This command overrides whatever is already configured, that’s why Domain Admins and Enterprise Admins are included.  If you have other AD groups that are already configured, you’ll have to add those here too because this will overwrite those groups.

Since I run it often, I save it as a task in my ARD sidebar.  I just edit the groups before I add computers to the task.

I have a “Temp” task in my sidebar that I like to use.  That way I can take my time reviewing and tweaking the whole task and computer list.  I can also save it.