Solved

SBS2003 Permissions Problem

Posted on 2009-03-30
3
279 Views
Last Modified: 2012-05-06
I have recently inherited the problems of a Windows 2003 SBS server that was in a pretty shabby state. I have sorted it all out now apart from one very annoying problem.

I found that Domain Users were a part of the Administrators security group and as a result have full access to everything. When the Domain Users group is removed from the Administrators security group everything returns to normal, the permissions are all as they should be.

Within 24 ~ 48 hours the change is undone. I have checked the scheduled tasks and there doesnt seem to be anything there that could do this and I am out of ideas....

Any help is greatly appreciated.

Thanks!
0
Comment
Question by:kylegreig
  • 2
3 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 500 total points
ID: 24016867
Check restructed groups - it sounds like Domain Users have been added to administrators via a restricted group policy http://technet.microsoft.com/en-us/library/cc785631.aspx
http://www.computerperformance.co.uk/w2k3/gp/group_policy_security_restricted_group.htm
0
 

Author Comment

by:kylegreig
ID: 24017114
Looks like the right track but having some problems finding the area to configure Restricted Groups. I came accross the info on http://www.petri.co.il/forums/showthread.php?p=97545 and went through all of the vairous things they suggested but still not able to locate where to configure the Restricted Groups.

Thanks again for your help :)
0
 

Author Comment

by:kylegreig
ID: 24026729
I found that when the Group Policy Management Console with Service Pack 1 is installed, the way to navigate to this section is different to what the typical instructions tell you to do. I removed this via add/remove programs and found that I was easily able to find these settings. Thanks for your help!
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Small Business Server 2011. NOTE: This guide has been written using the preview version of SBS2011 therefore some of the screens may …
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
With the power of JIRA, there's an unlimited number of ways you can customize it, use it and benefit from it. With that in mind, there's bound to be things that I wasn't able to cover in this course. With this summary we'll look at some places to go…

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now