I have a user (userFoo) who is domain1). They are in a group called "machineAdmins" in another domain called domain2. "machineAdmins" gets pushed down to all machines in domain2 and the group "machineAdmins" is auto added to the local administrators group on the machine.
The problem is that this seems to work for other users in the "machineAdmins" including ones who are on domain1, but for userFoo they are not an admin when they log in to the machine using their domain1 account. I checked the local machines Administrators group, and it does have "machineAdmins" in it's list, and I double checked that "machineAdmins" has userFoo in it and it's the proper domain1\userFoo account.
This machine is a brand new install, it's not from sysprep or anything like that, so it's as clean as it can possibly be. I tried this on multiple machines though and they all behave the same, this user is never an admin when they login.
I can't seem to figure out why this would be happening. I checked userFoo against other users who are working, but there doesn't seem to be any real difference between them. The other users aren't domain admins or any other kind of user like that, and they aren't explicitly in the local Administrators group either.
Any ideas why this is happening?
