Domain Admins not automatically added to the Builtin Admins group on member servers

dpsys
dpsys used Ask the Experts™
on
I have a three-node test network that has one AD server and two other servers (all installed with Windows Server 2008 Enterprise Edition). My problem is that when the non-AD servers are added to the domain the Domain Admins group is not automatically added to the Builtin Administrators group on the new member servers.  I could be wrong, but I was under the impression that any time a computer is added to a domain that the new member computer would automatically have the Domain Admins group added to the Builtin Administrators group.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2013

Commented:
Yes they should be added to the admin group on member servers and workstations.  Do you have any sort of restricted group group policy that sets the membership on the servers?
Thanks
Mike

Author

Commented:
I don't think so because the servers are all installed using a template which I created from scratch with a Server 2008 Ent ISO.
Top Expert 2013
Commented:
It would be interesting to add a workstation or another server without the template in your lab, see if that makes a difference.
11/26 Forrester Webinar: Savings for Enterprise

How can your organization benefit from savings just by replacing your legacy backup solutions with Acronis' #CyberProtection? Join Forrester's Joe Branca and Ryan Davis from Acronis live as they explain how you can too.

Author

Commented:
I'm already on it, but at this rate (meetings, etc.) it may take until Monday to get it done. I will post the results as soon as I can. Thanks for the comments.
Henrik JohanssonSystems engineer
Top Expert 2008

Commented:
Use RSOP.msc and verify if there's any GPO configuring restricted groups.

Author

Commented:
The problem was with the VM Template. It looks like the DC and the two member servers had all the same SIDs due to using the same template for all three VMs. When I added a new machine (not from a template) to the domain, it worked fine. I just recreated the template using a sysprep file and it's working fine now. Thanks for the input guys.
Top Expert 2013

Commented:
Nice work creating the new template.
Thanks
Mike

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial