drunk3nrabbit

Could someone give me a general idea of how I could clone the administrator group and change it so that it can do everything a normal administrator could do, but not access bitlocker, or manage other accounts.

thanks
-ben