Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

restricted groups GPO + event ID 637

Status
Not open for further replies.

windowsfan

IS-IT--Management
Jan 26, 2007
237
US
I have configured restricted groups GPO for Administrators, Domain Admins and Ent Admin groups. I have total 6 Domain controllers, 5 sites.
In event viewer I see event ID 637 where its removing and adding Domain Admin and Ent Admin from Administrators group. How can I find out whats wrong? GPO looks fine to me.
 
If you are seeing this in the Security logs as a success audit, then the gpo is just doing its job. I think that is how it maintains the restricted group members. remove all just in case one got added and replace with the ones you specified.
 
I will find out how often it adds and removes groups.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top