Re: Dmin group member ship keeps disappearing.

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 11/08/05


Date: Mon, 7 Nov 2005 19:39:30 -0600

You either have Restricted Groups enabled in the domain or are using a Group
Policy shutdown script to manage membership of the administrators group.
Restricted Groups would be my first bet. It is described more in the link
below. You can run rsop.msc on that domain computer and check to see if
Restricted Groups is being applied to it under computer configuration and
from what Group Policy. --- Steve

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

"Bruce Musgrove" <bruce.musgrovenospaem@utsouthwestern.edu> wrote in message
news:es7mr964FHA.2616@TK2MSFTNGP12.phx.gbl...
> Windows XP pro system on a 2003 domain. I have run into a issues wiuth a
> couple of computers and adding admins to the local admin account.
>
> I have tried adding a local user account to the local computers'
> administrative group. I have done this while logged on as a domain admin
> and while logged on as a local computer administrator. Everything works
> fine for the local user (he has admin rights and can use them) I added
> until I reboot the computer. Once the computer is rebooted, the local
> user account I added to the local adminsiatrative group has disappeared
> from that group. The local user is still on the computer, just no longer
> a memebr of the local admin group.
>
> Any ideas?
>



Relevant Pages

  • Re: Administrative rights
    ... Using restricted groups can remove all other users/groups from the local ... administrators group. ... > security group called Helpdesk. ... > admin doesn't work either. ...
    (microsoft.public.win2000.group_policy)
  • Re: Rid AD of Circular Group Membership
    ... Unfortunately since the previous Admin used Restricted Groups on the Default ... Administrators group in the domain can manage the domain controllers ... and have use on members if it is used there. ... The quess is each has an account and uses it, ...
    (microsoft.public.windows.group_policy)
  • Re: restricted groups for local admin rights
    ... I'm referring to local administrators and not domain administrators?) ... > describe you want to use the "member of" option for restricted groups. ... > way you can add a global group to the administrators group without affecting ...
    (microsoft.public.windows.group_policy)
  • Re: remove local admin rights
    ... I have set up a policy to make all domain users Local Admins - I ... users have remained in the local Admin group... ... Double-click Startup, click Add ... Restricted groups are useful sometimes but I'm old fashioned and prefer the ...
    (microsoft.public.windows.group_policy)
  • Re: Windows Systemwiederherstellung
    ... and Windows XP ", die Referenz für die Group ... | If you configure this policy setting to Administrators group, ... Eine Datei, die der Admin erstellt, wird allen Admins zugerechnet. ... Ist das nicht genau das Problem, ...
    (de.comp.security.misc)