Windows Server 2003 Group Policy - Restricted Group problem

Discussion in 'Server Security' started by shuckie69, Mar 22, 2010.

  1. shuckie69

    shuckie69 Guest

    Hello everyone

    Is there a way of finding out why a particular user keeps getting removed
    from a Restricted Group, even though the user ID has been added to the
    Restricted Group in the default domain policy? There are no other policies
    applied to the OU which contains this users account, and no other users who
    are in the same group (in this case engineers) have reported the same problem.

    I'm hoping that I might be able to use a free tool to analyse the event logs
    for an event ID which relates to a user being removed from a group either
    automatically or manually, however I don't know if this is possible or
    whether there might be an easier way to find out.

    Thanks in advance for your assistance.

    (P.S. I had typed quite a detailed thread, but when I went to copy the text
    (in case something went wrong when I went to post my thread), I managed to
    paste something else over what I'd written! I'm fighting the urge to throw
    my PC out of the window at the moment, so if you need any more detail please
    shuckie69, Mar 22, 2010
    1. Advertisements

  2. shuckie69

    jj jammer Guest

    Have you modelled to the gpo to see if your gpo is overwritten by a higher
    level gpo. You could run an rsop at the workstation to see what is the
    correct gpo to edit also check if you're doing any loopback back
    jj jammer, Mar 22, 2010
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.