Re: Domain Admin Group membership / Domain Security policy

Sounds like a restricted group issue.

Check out:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/156780ef-eb36-4433-b3fe-1b1a15c18f6a.mspx


--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.


"Guido" <gadiaz@xxxxxxxxxxx> wrote in message
news:A3023B84-14E7-4D25-BA61-0408851203E8@xxxxxxxxxxxxxxxx
>I am trying to add a new member of out IT department to the Domain Admin
> group and he is getting removed every time that the security policy is
> applied. There are restricted groups in both the Domain controller and
> Domain
> security policies but the new user is a member of both restricted groups.
>
> Also the old member of the IT dept that is no longer in IT keeps on
> getting
> "Re-added" to the Domain Admin restricted group even though when you look
> into his AD user account he is not in the Domain Admin group.
>
>
> --
> Guido


.

Relevant Pages

  • RE: Restricted groups
    ... user account was a member of the local administrators group. ... Restricted groups enforce membership - you can set it so that only certain ... | I have added the domain user to local administrator group ...
    (microsoft.public.win2000.active_directory)
  • Re: Domain Admin Group membership / Domain Security policy
    ... the domain and domain controllers. ... Domain Admins membership through Restricted Groups is in effect. ... >I am trying to add a new member of out IT department to the Domain Admin ... > security policies but the new user is a member of both restricted groups. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Adding Local Administrators Using Group Policy
    ... Until you remove the GPO settings, any non restricted group members will be ... I created the administrator group in 'Restricted Groups' ... pushed the Domain Admin group as an local administrator, ...
    (microsoft.public.windows.group_policy)
  • Domain Admin Group membership / Domain Security policy
    ... I am trying to add a new member of out IT department to the Domain Admin ... There are restricted groups in both the Domain controller and Domain ... security policies but the new user is a member of both restricted groups. ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to grant security access to Help Desk?
    ... Use restricted groups: ... I don't want to give him "domain Admin" security access. ... admin" is the Administrator of the workstation. ... Help Desk guy admin to all workstations in my domain without adding ...
    (microsoft.public.windows.server.active_directory)