Populating local administrators Group on servers with Group policy preferences.

After a while ADaudit triggers alarms " Member '-' was removed from Domain Local Security Group 'Administrators' by 'DOMAIN\SWE-FS1$'." and directly after "Member '-' was added to Domain Local Security Group 'Administrators' by 'DOMAIN\SWE-FS1$'."

 

This start after a while on some servers. The only way I can get it to stop is to remove the server from ADAudit or remove the GPO.

 

HOw can I solve this issue? I stil want to use preferences and to restricted Groups.