It was after all a GPO. An unidentified junior admin had apparently been looking at Restricted Groups. He/she put the Domain Admins in the Restricted Groups section of the Default Domain GPO, but no users were in the list. Hence, we'd add back the users, and when the policy would refresh, they'd be stripped out again. Checking the logs now to see if I can track down the well-intentioned offender.
- Philip From: Rod Trent [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2008 9:01 AM To: NT System Admin Issues Subject: RE: Members Disappearing from Groups Possibly another GPO? From: Phil Hershey [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2008 11:42 AM To: NT System Admin Issues Subject: Members Disappearing from Groups We've recently begun to experience a problem with users losing membership to a group. So far it seem just to be my administrators losing their memberships in the Domain Admins security group. Anybody have any ideas what might be causing this? I'm concerned, obviously, about AD corruption or even a root kit. Thanks in advance. Phil Hershey Carpinteria, CA ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
