Domain Admins are not Local Admins

[Rayzr]

Hi guys, I'm in need of some help on this one..

Basically, when a computer joins our domain, the Domain Administrator and members of the Domain Admins Group are only added to the local machine as a Debugger User. By default, these should be in the Local Admins group.

Restricted groups within the Domains Group Policy is NOT active..

Please help, this is sendin me crazy now - any ideas?

Cheers

Ray

 

[SquaredNull]

So you want to make your domain users group a member of local administrators groups but cannot do that because th option is unavailable? If you're running pre-SP4 you need to apply fix before you will be able to do that. Take in mind that Restricted Groups GPs do not merge.

 

[Rayzr]

Thanks for the reply..

No, by default in any Domain, the Domain Administrator and Domain Admins group is added to the Local administrators group when the PC first joins the domain. Although this never used to be a problem, when we now join a PC to our Domain, these groups are added as local Debugger Users, not Administrators.

Cheers

Ray

 

[AJ1982]

Check for Restricted Groups in the relevant policies whcih are applied... Also, are your machines just lying in the Computers container, or have u moved them elsewhere?

===

Fatman Superstar (Andrew James)

CCNA

 

[Rayzr]

GPO restricted groups is not applied anywhere within the domain and all machines are within designated OU's