Solved

SBS2003 Permissions Problem

Posted on 2009-03-30
3
269 Views
Last Modified: 2012-05-06
I have recently inherited the problems of a Windows 2003 SBS server that was in a pretty shabby state. I have sorted it all out now apart from one very annoying problem.

I found that Domain Users were a part of the Administrators security group and as a result have full access to everything. When the Domain Users group is removed from the Administrators security group everything returns to normal, the permissions are all as they should be.

Within 24 ~ 48 hours the change is undone. I have checked the scheduled tasks and there doesnt seem to be anything there that could do this and I am out of ideas....

Any help is greatly appreciated.

Thanks!
0
Comment
Question by:kylegreig
  • 2
3 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 500 total points
ID: 24016867
Check restructed groups - it sounds like Domain Users have been added to administrators via a restricted group policy http://technet.microsoft.com/en-us/library/cc785631.aspx
http://www.computerperformance.co.uk/w2k3/gp/group_policy_security_restricted_group.htm
0
 

Author Comment

by:kylegreig
ID: 24017114
Looks like the right track but having some problems finding the area to configure Restricted Groups. I came accross the info on http://www.petri.co.il/forums/showthread.php?p=97545 and went through all of the vairous things they suggested but still not able to locate where to configure the Restricted Groups.

Thanks again for your help :)
0
 

Author Comment

by:kylegreig
ID: 24026729
I found that when the Group Policy Management Console with Service Pack 1 is installed, the way to navigate to this section is different to what the typical instructions tell you to do. I removed this via add/remove programs and found that I was easily able to find these settings. Thanks for your help!
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

The SBS 2011 release date (RTM) is supposed to be around Christmas, 2011.  This article is a compilation of my notes -- things I have learned first hand.  The items are in a rather random order, but I think this list covers most of what is new and d…
The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now