It was after all a GPO. An unidentified junior admin had apparently
been looking at Restricted Groups. He/she put the Domain Admins in the
Restricted Groups section of the Default Domain GPO, but no users were
in the list. Hence, we'd add back the users, and when the policy would
refresh, they'd be stripped out again. Checking the logs now to see if
I can track down the well-intentioned offender.
- Philip
From: Rod Trent [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 03, 2008 9:01 AM
To: NT System Admin Issues
Subject: RE: Members Disappearing from Groups
Possibly another GPO?
From: Phil Hershey [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 03, 2008 11:42 AM
To: NT System Admin Issues
Subject: Members Disappearing from Groups
We've recently begun to experience a problem with users losing
membership to a group. So far it seem just to be my administrators
losing their memberships in the Domain Admins security group. Anybody
have any ideas what might be causing this? I'm concerned, obviously,
about AD corruption or even a root kit.
Thanks in advance.
Phil Hershey
Carpinteria, CA
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~
~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
