Re: Domain users being added to Administrators

Thank you for the fast response.

It happens every evening. I have not had it happen during a reboot.

It is the Local Administrators group.

Thank oyu for the help,
Brett



"Mathieu CHATEAU" wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

does this occur only at night or after every reboot ?

Is it the domain admins group or the local administrators group ?

If it's domain admins, review the group membership, and change all
password of member's account

If it's local admin, it may be already a GPO, or scheduled tasks

Cordialement,
Mathieu CHATEAU
french blog: http://www.lotp.fr
english blog: http://lordoftheping.blogspot.com


thajuggla4478 a écrit :
Hello all,

I have ran into a problem where our doamin users group is being added to
our administrators group nightly. I have tried several different things, but
to no avail. I am beginning to suspect that we have a hacker running loose
on our network here. Is there a way that I can lock this out short of using
the GPO?

Thank you,
Brett
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkjX3C4ACgkQR16rF5v5prD+zwCeOHBJgLE9q5uzvW9OKgGqZYJw
P8MAn2+tmiXp9u20f0bZHsTyDkXf6BiJ
=+13k
-----END PGP SIGNATURE-----

.

Relevant Pages

  • Re: Scripting questions
    ... which is a member of the local Administrators group on computer "WST101". ... Bind to the local administrators group on the remote computer and use the ...
    (microsoft.public.windows.server.scripting)
  • Re: Local PC administration
    ... object to the local Administrators group on each PC. ... Administrators group on each Domain PC. ... Workstation Admins) a member. ...
    (microsoft.public.win2000.active_directory)
  • Re: restricted groups for local admin rights
    ... > user to the local administrators group on that computer. ... >> First off be sure to use Restricted Groups at the Organizational Unit ... >>> I have read several articles on how to do it but it is confusing to me. ...
    (microsoft.public.windows.group_policy)
  • Re: Win 2003 Local Admin Problem
    ... You should have defined a built-in Administrators group as a restricted ... I added the local administrators group on my PC. ... Windows Server - Directory Services ... >>>> You can use Restricted Groups feature of the GP to add Domain Admins ...
    (microsoft.public.windows.group_policy)
  • Re: Help needed setting up roaming administrator
    ... Another option is a "startup" script implemented via Group Policy to ... computers within the scope of influence of the policy such as the Organizational Unit ... Administrators group use. ... > default users and groups in the local Administrators group. ...
    (microsoft.public.win2000.security)