... # Allow members of domain group "Domain Admins" to execute any command %domain\ admins ALL=(ALL:ALL) ALL ...