Given that you can have the logon script execute in the context of an Administrator account. You can accomplish what you want. I think that the most difficult request is knowing that the computer was just added to the domain and cleaning up the Administrators group.
Change Admin PW: My preference would be to code it using ADSI. Change local admin password Your desire to have this done as part of the initial logon will require some additional work to tell the script it is an initial logon. Or you could just execute a configuration script after logon.
Changing the membership of the Admnistrators group. remove/add members Again, if you have the ability to use ADSI, I would code it directly and not use and external executable.
