Re: User accounts being deleted

From: Dave Nickason [SBS MVP] (gwdibble_at_NOSPAM.frontiernet.net)
Date: 11/08/04


Date: Mon, 8 Nov 2004 13:15:36 -0500

That AV thing sounds like an XP SP2 issue - I ran into the exact same thing
with eTrust (PCs would update but could not be remotely monitored or
configured). Your AV company should have a patch or workaround for that.

"Andy L" <anonymous@discussions.microsoft.com> wrote in message
news:4d7001c4c581$d8273e00$a301280a@phx.gbl...
> Hi Marina,
>
> Thanks for coming back to me. We have an application that
> doesn't run correctly unless the user has local admin
> rights to their system. I forgot to mention that the
> monitoring console for our anti-virus is unable to
> view/control these systems across the network, although
> they are updating correctly.
>
> If someone had been messing with Group Policies, what
> would I be looking for?
>
> Kind regards.... Andy
>
>>-----Original Message-----
>>Hi Andy,
>>
>>Why would a user need local admin rights? That is only
> needed when
>>installing applications.
>>Things don't happen just by itself. If you are not the
> one who perhaps made
>>group policies for this, then there must be someone else
> with admin rights
>>doing that.
>>
>>--
>>Regards,
>>
>>Marina
>>Microsoft SBS-MVP
>>
>>"Andy L" <anonymous@discussions.microsoft.com> schreef in
> bericht
>>news:0a5201c4c57a$539da9a0$a501280a@phx.gbl...
>>> Hi all, hope you can help with this problem. We have a
>>> SBS2K sever with 40 client workstations attached. The
>>> clients are a mixture of win2k and XP. A few weeks back
> I
>>> noticed that users accounts on their workstations had
> been
>>> removed, meaning anything that required admin rights on
>>> their PC was denied to them. I reset these by logging
> onto
>>> each system as a local administrator and added the
> domain
>>> users and domain administrators account to each one, but
>>> over a period of a couple of days these accounts have
> been
>>> deleted with the exception of one windows XP machine. I
>>> have repeated this exercise several times, and each time
>>> the accounts disapeared, sometimes in minutes, somtimes
>>> taking a couple of days. It is not possible that someone
>>> is manualy removing these as I have witnessed this
>>> happening when no one else has access to the network.
>>>
>>> I have checked for viruses, spyware, and any unusual
>>> registry entries on server and clients. There is also
>>> nothing set in group policies.
>>>
>>> Any help would be much appreciated, this is driving me
> mad.
>>>
>>> Regards...... Andy
>>>
>>
>>
>>.
>>



Relevant Pages

  • Re: User accounts being deleted
    ... just dont run if you don't have local admin rights. ... If someone did have domain admin rights how would they ... >Hi Andy, ...
    (microsoft.public.backoffice.smallbiz2000)
  • group policy
    ... admin rights to all users even local admin account. ... problem is that the group policies are still in effect. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Removing Local Admin Rights...
    ... rights, install, configure and take away admin rights. ... Subject: Removing Local Admin Rights... ... > our expert instructors. ... > Attend a course taught by an expert instructor with years of ...
    (Security-Basics)
  • Re: Problems with Users Permissions
    ... giving the new user local admin rights did not grant access to the files. ... > Now the new user can get to the Office docs and edit/save/etc.. ... I think I've got a very basic problem here but I'm fairly ...
    (microsoft.public.windows.server.sbs)
  • RE: Spying in a corporate environment
    ... If you have a 2003 domain enforce group policies and restrict access to ... As long as they have admin rights you don't have control, ...
    (Security-Basics)