Re: Domain Admin groups - users disappear/reappear ???

Howdie!

JayDee wrote:
> Here's the weird part: Although the script runs every two hours, this
> occurs at different seemingly random intervals. I will receive emails
> stating some users were removed, then were added to a number of admin
> groups at the same time! Does AD remove and readd groups to domain
> admin groups occasionally during some kind of background maintenance?
> Since the script and methodology are relatively simple and more
> importantly the problem occurs at random intervals, not all intervals,
> I don't think it has anything to do with the script itself. Oh, and
> this happens regardless of whether or not any changes were actually
> made to the groups.

Hmm - there's no mechanism I'd know of. Maybe Restricted Groups in a
Group Policy linked to the Domain Controllers OU to protect admin
groups. I'd check on that.

Other than that, I'd enable auditing to see whether there actually are
changes at the directory.

You're sure the script is running correct, right?

Florian