Re: Built in Groups Administrators issue in new raised functional
- From: ADSadmins <ADSadmins@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 6 Feb 2009 02:41:01 -0800
No restricted groups.
Root: xyz.org
Child1: c1.xyz.org
Child2: c2.xyz.org
After the upgrade:
CHILD domain admins are not longer member of the built-in ADMINISTRATORS
For Example:
When you check the Administrators group of c1.xyz.org it only has the :
ff:
Domain Admins\xyz.org
Enterprise Admins\xyz.org
Domain Admins of c1.xyz.org is missing??
"Jorge de Almeida Pinto [MVP - DS]" wrote:
CHILD domain admins are not longer member of the built-in ADMINISTRATORS.
group... in which AD domain?
group members are not just removed like.... are you using restricted groups
to manage the membership of that group?
--
Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)
# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #
BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"ADSadmins" <ADSadmins@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A3418F00-F693-4EBE-855E-8C875515CFC2@xxxxxxxxxxxxxxxx
Environment
4 child domains
1 forest root ( windows 2003 functional level) { Raised recently}
We found out that Child domain admins were no longer in the Built-In
Administrators group (ADS Users & Computers) this is after an upgrade was
performed Win2003 Functtional level.
Yesterday we manually restored the former settings. However, these
settings
were again removed overnight.
If these changes are by design ? If yes, then we want to put it back,
question is how do we enforce?
thanks
- References:
- Built in Groups Administrators issue in new raised functional leve
- From: ADSadmins
- Re: Built in Groups Administrators issue in new raised functional leve
- From: Jorge de Almeida Pinto [MVP - DS]
- Built in Groups Administrators issue in new raised functional leve
- Prev by Date: GPO for Install Updates and Shutdown?
- Next by Date: How to find when Administrator account is being used?
- Previous by thread: Re: Built in Groups Administrators issue in new raised functional leve
- Next by thread: Re: Built in Groups Administrators issue in new raised functional leve
- Index(es):
Relevant Pages
|
