2003 AD Administrators group

[djtech2k]

I have a weird thing happening. Over time, I have found computer objects as members of my Administrators group. I am talking about the "Administrators" native group and not domain admins. This is SO weird because I have never put them in there nor has anyone else. Has anyone else seen this happen?

 

[markdmac]

Never seen that. My guess is someone dragged them there accidentally and doesn't even know it.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[djtech2k]

Well, I thought that too, but I have very strict auditing using NetPro ChangeAuditor and it is not in there. I did notice some of those machines added to the group and the account the auditing said did the move was basically the samaccountname of the DC. This has always indicated that it was an "internal" move made by the system. For example, if you change certain settings in AD, the system will make changes to AD to reflect the options you changed. When that happens, it will show a similar event.

Anyway, it has been weird and I still cannot figure out how it happened. If a person did it, I would have an audit for it.