Solved

SBS2003 Permissions Problem

Posted on 2009-03-30
3
309 Views
Last Modified: 2012-05-06
I have recently inherited the problems of a Windows 2003 SBS server that was in a pretty shabby state. I have sorted it all out now apart from one very annoying problem.

I found that Domain Users were a part of the Administrators security group and as a result have full access to everything. When the Domain Users group is removed from the Administrators security group everything returns to normal, the permissions are all as they should be.

Within 24 ~ 48 hours the change is undone. I have checked the scheduled tasks and there doesnt seem to be anything there that could do this and I am out of ideas....

Any help is greatly appreciated.

Thanks!
0
Comment
Question by:kylegreig
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 500 total points
ID: 24016867
Check restructed groups - it sounds like Domain Users have been added to administrators via a restricted group policy http://technet.microsoft.com/en-us/library/cc785631.aspx
http://www.computerperformance.co.uk/w2k3/gp/group_policy_security_restricted_group.htm
0
 

Author Comment

by:kylegreig
ID: 24017114
Looks like the right track but having some problems finding the area to configure Restricted Groups. I came accross the info on http://www.petri.co.il/forums/showthread.php?p=97545 and went through all of the vairous things they suggested but still not able to locate where to configure the Restricted Groups.

Thanks again for your help :)
0
 

Author Comment

by:kylegreig
ID: 24026729
I found that when the Group Policy Management Console with Service Pack 1 is installed, the way to navigate to this section is different to what the typical instructions tell you to do. I removed this via add/remove programs and found that I was easily able to find these settings. Thanks for your help!
0

Featured Post

Guide to Performance: Optimization & Monitoring

Nowadays, monitoring is a mixture of tools, systems, and codes—making it a very complex process. And with this complexity, comes variables for failure. Get DZone’s new Guide to Performance to learn how to proactively find these variables and solve them before a disruption occurs.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question