Active Directory GPupdate issue

Posted on 2008-11-11
Last Modified: 2012-05-05
HI All,

having an issue with a server we maintain.  some of the users are complaiing that they lose local administrator priviledges. so on investigation we noticed that any policy change made would revert back to default after a GP update .  for example userx  is added to the administrators group once the Group policy refreshed they are no longer part of the group

look foward to hearing from you all
Question by:capitalit
    LVL 6

    Accepted Solution

    perhaps you have another GPO in place effecting the users...

    try do a 'group policy modeling' of a specific user or group of users.this may tell you whats being applied and if there are any conflicts..

    it is located at the bottom of the group policy managment console..underneath the 'group policy objects'
    LVL 7

    Assisted Solution

    I agree with hexemes.

    You have 1 or more gpo applied to your servers with 'Restricted Groups' settings

    LVL 6

    Expert Comment

    by:Leon Teale
    seems a little unfair to split the points because someone said yes I agree with hexemes :P

    but yeah i'm happy with my solution and unless there is any further assistance needed we can close this string.

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Join & Write a Comment

    Starting in Windows Server 2008, Microsoft introduced the Group Policy Central Store. This automatically replicating location allows IT administrators to have the latest and greatest Group Policy (GP) configuration settings available. Let’s expl…
    Do you have users whose passwords are expiring and they are constantly calling you?  Well I sure did and needed a way to put an end to this.  We have a lot of remote users which would not be notified that their passwords were expiring since they wer…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now