Domain Users group does not retain the Log on Locally right

I've got some workstations here in the office that appear were not joined to
the SBS domain by using the SBS wizard. I discovered this when other users
were not able to log onto any machine in the office because "Domain Users"
were not members of the "Log on Locally" policy. So what I have been doing
is removing the workstation from the domain, deleting the computer account
from AD and then readding the computer account then going to the
workstations and logging in as local administrator and running
\\servername\connectcomputer.
My issues are that when I do this I go to check the local policy on the
workstations and it does add Domain Users to the Lo on Locally policy. So
now I run Windows and Microaoft Updates and have noticed that these machines
where I had to rejoin the domain are not retaining the Domain Users group in
the Log on Locally policy. In fact when I go to view the policy and
membership I can see the members but now they are all greyed out and I
cannot manually edit them. So it appears that updates are somehow affecting
this process. Any ideas? I have checked my Domain GPO and yes Domain Users
are in the Lo on Locally domain policy.


.

Relevant Pages
Loading