Solved

Domain user is being dropped out of the local admin group on a WIN2K3 Server after a few hours.

Posted on 2006-07-12
5
324 Views
Last Modified: 2010-05-18
Our development guy has a test server that is on the network, he needs to be in the local admins group to do his debugging. I add him to the local admins group on the machine and the account is missing hours later. The admin group contains other domain accounts, but they all happen to be domain groups. None of these are being dropped. Any ideas?
0
Comment
Question by:AmsurgIS
  • 3
  • 2
5 Comments
 
LVL 83

Expert Comment

by:oBdA
ID: 17091159
That's probably a group policy "Restricted Groups" being applied to this machine. You need to change this policy, or (if possible) add the development guy to one of the groups that has local admin permissions.
0
 

Author Comment

by:AmsurgIS
ID: 17091372
Would this be a local policy?
0
 
LVL 83

Expert Comment

by:oBdA
ID: 17091470
No, that's a domain policy; "Restricted Groups" aren't available as local policies (wouldn't make too much sense).
0
 

Author Comment

by:AmsurgIS
ID: 17091766
True, but I don't see that policy as being in affect.
0
 
LVL 83

Accepted Solution

by:
oBdA earned 250 total points
ID: 17091950
Open a command window, and run
gpresult /scope computer /v >gpresult.txt
Then open gpresult.txt in notepad and check the "Restricted Groups" section; this is basically the only possibility for accounts to disappear from local groups.

0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Computer crashes, following error message in event manager 5 201
shadow copies 7 78
Windows server 2003 bootable iso 9 91
MS Endpoint Protection 2 25
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question