Re: Domain Admin Group membership / Domain Security policy

Use gpresult or similar tools to verify effective policy being applied to
the domain and domain controllers. It is clear that a GPO that redefines
Domain Admins membership through Restricted Groups is in effect.

--
Dmitry Korolyov [d__k@xxxxxxxxxxxxxxxxxxxxxx]
MVP: Windows Server - Directory Services


"Guido" <gadiaz@xxxxxxxxxxx> wrote in message
news:A3023B84-14E7-4D25-BA61-0408851203E8@xxxxxxxxxxxxxxxx
>I am trying to add a new member of out IT department to the Domain Admin
> group and he is getting removed every time that the security policy is
> applied. There are restricted groups in both the Domain controller and
> Domain
> security policies but the new user is a member of both restricted groups.
>
> Also the old member of the IT dept that is no longer in IT keeps on
> getting
> "Re-added" to the Domain Admin restricted group even though when you look
> into his AD user account he is not in the Domain Admin group.
>
>
> --
> Guido


.

Relevant Pages

  • Re: Domain Admin Group membership / Domain Security policy
    ... >I am trying to add a new member of out IT department to the Domain Admin ... > security policies but the new user is a member of both restricted groups. ... > into his AD user account he is not in the Domain Admin group. ...
    (microsoft.public.windows.server.active_directory)
  • Domain Admin Group membership / Domain Security policy
    ... I am trying to add a new member of out IT department to the Domain Admin ... There are restricted groups in both the Domain controller and Domain ... security policies but the new user is a member of both restricted groups. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Power User Setting Not Saved
    ... included in the Restricted Group via this group is a member of. ... power users along with the specific user you added. ... Restricted Groups to speed up propagation of any changes first run gpupdate ... move it to an Organizational Unit that would not have that Group Policy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Power User Setting Not Saved
    ... included in the Restricted Group via this group is a member of. ... power users along with the specific user you added. ... Restricted Groups to speed up propagation of any changes first run gpupdate ... move it to an Organizational Unit that would not have that Group Policy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Power User Setting Not Saved
    ... when I say "local user" I mean the login name that is typically used ... user that is a member of that OU then be a Power User? ... There are two ways to do Restricted Groups - members of this group or this ... membership of the Restricted Group [power users in your case] will be ...
    (microsoft.public.windowsxp.security_admin)