troubleshooting Question

Primary Group for a user

Avatar of Simon336697
Simon336697Flag for Australia asked on
Active DirectoryScripting Languages
9 Comments4 Solutions1815 ViewsLast Modified:
Hi guys hope you are all well and can assist.

We have a situation where a lot of our users have different primary groups.

From my understanding, a new user has a default primary group of Domain Users.

What we need to understand is this.

If you have a user, that was once a member of Domain admins, but has now been removed from domain admins, and their primary group is still Domain admins, does this mean they still have rights of a domain admin, even though they are not listed as a member of the Domain Admins group?

I hope this makes sense.

Basically, to put it another way.

User Bob was a member of Domain Admins.
His PRIMARY GROUP is Domain Admins

Now, Bob has been removed from Domain Admins due to a role change.
His PRIMARY GROUP has not changed, and is still Domain Admins.

Does this mean he still has user rights of a Domain Admin?

Should his primary group change back to the default of Domain Users?

Any help greatly appreciated.
ASKER CERTIFIED SOLUTION
Join our community to see this answer!
Unlock 4 Answers and 9 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 4 Answers and 9 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros