group policy settings is not removed after computer is removed from OU

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi,

I have a GPO that set certain domain users as local administrator using restricted group on a specific OU. Now I moved the computers to another OU for other administrative purpose. When I check the local administrators group of those computers, I am still seeing those users as members and I can still perform administrative tasks.

I rebooted the computer and verify that the GPO is not applied to the computers anymore by using gpresult.

Can someone advice if this is normal behavior?

Thanks
.

Relevant Pages

  • RE: Users and Groups
    ... Template of the Users and Computers Wizard. ... even Server assigned Apps applied via Users and Computers on SBS. ... but usually associated with inability to install ... Local Administrator. ...
    (microsoft.public.windows.server.sbs)
  • Re: local administrator account password policy
    ... computers that hold critical data are physically secured, ... less risk of local administrator passwords being compromised as it is easy ... computers] will make password cracking much more difficult after the policy ... account access smart cards. ...
    (microsoft.public.windows.server.security)
  • Re: windows log in not working HELP
    ... You will need to be connected to the domain when you do this and obviously you need to know the local administrator password. ... If you are not a systems administrator at your company, effectively this means that you need to take your laptop in hand and go to your sysadmin and be very nice to him/her. ... They will fix the situation and tell you how to use your home network resources when you and the laptop are out of the office. ... Elephant Boy Computers ...
    (microsoft.public.windowsxp.general)
  • Re: Restricted Groups problem !!!
    ... I think the fix is included with SP4 which all the ... computers have. ... >Restricted Group Policy that what ever might be a member ... >> their Domain user as Local Administrator too (each ...
    (microsoft.public.win2000.active_directory)
  • Re: Deleting a valid computer account disables the local admin account
    ... When trying to RDP into these computers we found that the local administrative account was locked out. ... Hi Paul, ... I have not experienced this before, but I created with very little effort a BartPE bootable cd with a plug-in that allows you reset a local administrator password on the system you have booted Bart on by specifying the config directory where the SAM you wish to modify is located. ...
    (microsoft.public.windows.server.active_directory)