Can't access old Admin user account after remove admin membership

[mr7clean]

We have removed several junior admins from administrative membership after they have changed departments. Now junior admins (account operators) cannot access the accounts of the previous Junior Admins. All of the administravive groups have been removed and Domain users has been set as their primary group. I have look for any security or permissions settings but have not found any. Any help would be greatly appreciated.


Regards,
Mr7clean

 

[markdmac]

Take a look at the "Managed By" property of the user accounts.

I hope you find this post helpful.

Regards,

Mark

 

[WhoKilledKenny]

I hope I am understanding your question. Members of Account operators can not manage accounts with the same security level or above. Meaning, if I am in the Account Operators group I cannot make changes to AD accounts that are also members of Account Operators or Domain Admins.

It sounds like that's what you are asking?

 

[mr7clean]

What I mean is that we have and administration group that our junior admins are in which is a member of Account Operators. When ever we remove members from that Junior admins group, the members that are still in the junior admins group cannot access the accounts of the old members.

So for instance a junior admin Bob moves to another department. We remove him from the junior admin group which is a member of Account Operators. The junior admins cannot access his account even though Bob is no longer an account operator or admin of any type.