Domain Admin Group membership / Domain Security policy

I am trying to add a new member of out IT department to the Domain Admin
group and he is getting removed every time that the security policy is
applied. There are restricted groups in both the Domain controller and Domain
security policies but the new user is a member of both restricted groups.

Also the old member of the IT dept that is no longer in IT keeps on getting
"Re-added" to the Domain Admin restricted group even though when you look
into his AD user account he is not in the Domain Admin group.


--
Guido
.

Relevant Pages

  • Re: Domain Admin Group membership / Domain Security policy
    ... the domain and domain controllers. ... Domain Admins membership through Restricted Groups is in effect. ... >I am trying to add a new member of out IT department to the Domain Admin ... > security policies but the new user is a member of both restricted groups. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Exchange 2003 send as permission,please help!
    ... No the user isn't a member of any of the groups mentioned. ... I can't figure it out as if I add her to the domain admin ... >permissions reset by Active Directory every hour. ... >Please do not send email directly to this alias. ...
    (microsoft.public.exchange.admin)
  • Re: True difference between Domain Admin grp and Administrators Group
    ... is a member of the domain "administrator" group by default. ... The domain admin group not only has local administrator ... group is automatically added to the local "administrators" group. ... Members of this group have full control of the domain. ...
    (microsoft.public.windows.server.general)
  • Re: Create a policy that grant local administrators to PC without
    ... You want to use the "member of" ... section of the group policy. ... > Hi Mike, well that is the thing that I dont know HOW!! ... >>> I know that if a Tech is member of the Domain Admin group, ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to start cmd.exe BOTH as administrator locally AND domain admin?
    ... What you need to do, in order to get domain and local administrator access is to create a domain account that is a member of the Domain Administrators group, and then make that account also a member of the local Administrators group on the machine you're working on. ... e.g. if I am domain admin and type NET STOP SPOOLER as domain admin, you get Access denied on the local Vista system. ...
    (microsoft.public.windows.vista.security)