Dmin group member ship keeps disappearing.

[Bruce Musgrove]

Windows XP pro system on a 2003 domain. I have run into a issues wiuth a
couple of computers and adding admins to the local admin account.

I have tried adding a local user account to the local computers'
administrative group. I have done this while logged on as a domain admin
and while logged on as a local computer administrator. Everything works
fine for the local user (he has admin rights and can use them) I added until
I reboot the computer. Once the computer is rebooted, the local user
account I added to the local adminsiatrative group has disappeared from that
group. The local user is still on the computer, just no longer a memebr of
the local admin group.

Any ideas?

 

[Steven L Umbach]

You either have Restricted Groups enabled in the domain or are using a Group
Policy shutdown script to manage membership of the administrators group.
Restricted Groups would be my first bet. It is described more in the link
below. You can run rsop.msc on that domain computer and check to see if
Restricted Groups is being applied to it under computer configuration and
from what Group Policy. --- Steve

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html