Replicate built in user’s access permissions

Apologies if this has been posted before, I couldn’t find a similar issue.
We now have a requirement to register existing c90lexs onto a domain, which has been done successfully. It was hoped that adding the domain users group into the local ‘users’ group would impose the same access restrictions (ie, no command prompt etc) as per the existing local ‘user’ account. However, this failed & although you can’t save any system settings through a domain user account (ie, no registry changes) we would like to impose the same restrictions as per the local ‘user’ account. I accept that we can apply the restrictions through GPO but is there a quicker/cleaner way to force domain users to pick up the same restrictions as the local ‘user’ account?

TA
Mike