Local Administrators & Active Directory



I'm working on some Win XP laptops and am new to Active Directory so
hopefully whoever may respond will be very concise in explaining the
solution.

I use Computer Management to make certain Active Directory groups
members of the Administrators group. This works great, for a while.

Can't figure out what's going on... but our users seem to lose
administrative rights over their laptops at random. They will bring
the PC back in claiming they lost administrative rights while they
were out in the field. I check the members list in Administrators...
and all the AD groups that were members are gone and have been
replaced by a white and red question mark-like icon with a string of
random characters.

The users in question have had their profile pulled down from the
server and changed from roaming to local as to hold their settings...
so the profile should never change.

Any idea why the Administrators group members constantly are being
wiped out? This has been a recurring issue that I am unable to figure
out. Any input from an expert would be great.

Kirby

.



Relevant Pages

  • Re: Restricted groups local admins
    ... look at the Members of this group, both local admin and domain group are ... Administrators group has full rights. ... your Active Directory? ...
    (microsoft.public.windows.server.setup)
  • Re: Restricted groups local admins
    ... Microsoft MVP - Windows Security ... look at the Members of this group, both local admin and domain group are ... Administrators group has full rights. ... your Active Directory? ...
    (microsoft.public.windows.server.setup)
  • Re: Restricted groups local admins
    ... If user is member of Administrators group on his PC, ... directory built in groups, the administrators group, that group is listed ... your Active Directory? ... Who are members of Administrators group in your Active Directory ...
    (microsoft.public.windows.server.setup)
  • Re: Restricted groups local admins
    ... It is not true that built in administrators group has full access ... Who are members of Administrators group in your Active Directory ...
    (microsoft.public.windows.server.setup)
  • Re: Rid AD of Circular Group Membership
    ... and have use on members if it is used there. ... Administrators group is still intact), nor do they have empowerments over ... Admins is being used for by the 30+ can be delegated I(ex. ... The quess is each has an account and uses it, ...
    (microsoft.public.windows.group_policy)