Solved

SBS2003 Permissions Problem

Posted on 2009-03-30
3
304 Views
Last Modified: 2012-05-06
I have recently inherited the problems of a Windows 2003 SBS server that was in a pretty shabby state. I have sorted it all out now apart from one very annoying problem.

I found that Domain Users were a part of the Administrators security group and as a result have full access to everything. When the Domain Users group is removed from the Administrators security group everything returns to normal, the permissions are all as they should be.

Within 24 ~ 48 hours the change is undone. I have checked the scheduled tasks and there doesnt seem to be anything there that could do this and I am out of ideas....

Any help is greatly appreciated.

Thanks!
0
Comment
Question by:kylegreig
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 500 total points
ID: 24016867
Check restructed groups - it sounds like Domain Users have been added to administrators via a restricted group policy http://technet.microsoft.com/en-us/library/cc785631.aspx
http://www.computerperformance.co.uk/w2k3/gp/group_policy_security_restricted_group.htm
0
 

Author Comment

by:kylegreig
ID: 24017114
Looks like the right track but having some problems finding the area to configure Restricted Groups. I came accross the info on http://www.petri.co.il/forums/showthread.php?p=97545 and went through all of the vairous things they suggested but still not able to locate where to configure the Restricted Groups.

Thanks again for your help :)
0
 

Author Comment

by:kylegreig
ID: 24026729
I found that when the Group Policy Management Console with Service Pack 1 is installed, the way to navigate to this section is different to what the typical instructions tell you to do. I removed this via add/remove programs and found that I was easily able to find these settings. Thanks for your help!
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question