Solved

SBS2003 Permissions Problem

Posted on 2009-03-30
3
289 Views
Last Modified: 2012-05-06
I have recently inherited the problems of a Windows 2003 SBS server that was in a pretty shabby state. I have sorted it all out now apart from one very annoying problem.

I found that Domain Users were a part of the Administrators security group and as a result have full access to everything. When the Domain Users group is removed from the Administrators security group everything returns to normal, the permissions are all as they should be.

Within 24 ~ 48 hours the change is undone. I have checked the scheduled tasks and there doesnt seem to be anything there that could do this and I am out of ideas....

Any help is greatly appreciated.

Thanks!
0
Comment
Question by:kylegreig
  • 2
3 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 500 total points
ID: 24016867
Check restructed groups - it sounds like Domain Users have been added to administrators via a restricted group policy http://technet.microsoft.com/en-us/library/cc785631.aspx
http://www.computerperformance.co.uk/w2k3/gp/group_policy_security_restricted_group.htm
0
 

Author Comment

by:kylegreig
ID: 24017114
Looks like the right track but having some problems finding the area to configure Restricted Groups. I came accross the info on http://www.petri.co.il/forums/showthread.php?p=97545 and went through all of the vairous things they suggested but still not able to locate where to configure the Restricted Groups.

Thanks again for your help :)
0
 

Author Comment

by:kylegreig
ID: 24026729
I found that when the Group Policy Management Console with Service Pack 1 is installed, the way to navigate to this section is different to what the typical instructions tell you to do. I removed this via add/remove programs and found that I was easily able to find these settings. Thanks for your help!
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A lot of problems and solutions are available on the net for the error message "Source server does not meet minimum requirements for migration" while performing a migration from Small Business Server 2003 to SBS 2008. This error pops up just before …
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

825 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question