Why Local administrator membership is deleted, when the domain users shut down and restart their PC

Posted on 2014-08-15
Last Modified: 2014-09-03
We had Windows 2008 Domain controllers and we have virtualised all our servers and our DCs are Windows 2012.

Windows XP PC (300)
Windows 7 (10 PCs)

We started upgrading our PC from windows XP to 7 . I have observed that some of the settings in Windows 7 PCs are not getting applied successfully as applied in XP.
For example;
Restricted user can customise the desktop in XP, but it doesn’t allow in Windows 7.
Restricted user logged in a XP cannot see Remote desktop and command prompt, but they can see the RDP and command prompt under Windows7 accessories.

When I asked my predecessors, they said the GPO was done for XP and because the GPO was done for XP, and this GPO will not get applied properly to windows 7 PC.

If I go to Windows 7 users PC and log in as administrator and add our domain users to a Local administrator group. When the domain users shut down and restart the PC and login the local administrator membership is deleted.
I don’t how this is happening.
But at the same time it doesn’t delete the local administrator membership on windows XP PC, it retains the membership even after it is rebooted and logged in back.

Please suggest how this can be resolved so that the local administrator membership doesn’t get deleted when they shut down the PC and log in back.

Question by:lianne143
    LVL 56

    Accepted Solution

    All of the things you listed are configurable group policy settings. And just so its clear, the defaults have not changed between XP and win7. So the differences are because of policies being enforced. Group policy inheritance, WMI filtering, and the plethora of settings make it fat too complex to go into in a single EE reply given your existing environment.

    Author Comment

    Thanks for your post.
    Actually  we have a program installed on our Windows7 PC. We have a couple of domain users who use this program and when they open this shortcut it asks for administrator password.

    If I give a local administrator permission on their Win7 PC to this domain user , and when they open this program, it doesn't prompt for administrator password and successfully opens.

    Is there a different  way of sorting this so that it doesn't prompt for a administrator password OR
    Can you please post me tutorials  as how to assign local administrator permissions in my network condition.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    I don't know if many of you have made the great mistake of using the Cisco Thin Client model with the management software VXC. If you have then you are probably more then familiar with the incredibly clunky interface, the numerous work arounds, and …
    If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
    This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.
    The viewer will learn how to back up in Windows 7 with native tools. This should be the first step. Third party tools should also be used. Access the Backup and Restore options: Click on the windows 7 start ball in the lower left corner of the scree…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now