0

I have a virtual server running Windows Server 2012 R2 inside my domain which is driving me absolutely crazy. Everytime I add a domain group to the local group "Administrators" it works for a while, but after 2 or 3 days it just vanishes from the server.

For easy management and access control, we create two Global Security Group in AD for each server, so for this one we have "[APPLICATION] Users Admin" and "[APPLICATION] Servers".

The first group is applied to the "Administrators" local group, and every domain user we need to give admin permissions are added to it. The second one is used to add every server that runs that application (in case we have more than 1), making it easy to our GPOs.

I'm starting to think that one of the admins is removing the group so he can ask us to remove the server from the domain, but I can't find a way to prove it.

Any ideas?

2

Have you checked to see if there is a GPO with Restricted Groups settings for Members? That would delete the added groups. You could also set a GPO with Restricted Groups settings for Members Of and if someone deleted the group, it would come back at the next GPO refresh. https://support.microsoft.com/en-us/kb/279301

  • Thought about it, but the only GPO applied to the OU is a server default one, which changes the password for the local admin and enables RDS. – Andrei Guerrieri Jul 29 '16 at 19:30

Your Answer

By clicking "Post Your Answer", you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.