SYSTEM account auto-removing me from Domain Admins 1

[rayen99]

I've got a strange problem with my 2K3 server. I've been the Domain Admins group since I started working there (2 years) and just recently the SYSTEM account automatically removed me from the group. and if I add myself back in it will remove me within probably 10 minutes or so. I've checked the event log and haven't seen anything funny in there (other than SYSTEM removing me). I've also ran a virus scan and it didn't return anything. I've never seen this happen before. And as I am the only admin of this system I don't think it's someone playing a trick on me. Although there is other ppl at the company that have admin privliges on it but they don't administer it. Also, the server will not remove me from any other groups (ie, Users, Enterprise Admins, etc). Anybody experianced a similar problem?

 

[porkchopexpress]

Is this system part af a larger domain structure?

 

[rayen99]

No it's not, it's the only DC on the domain and is not part of a forest, nor does it have any trust relationship with other domains. I added myself to Enterprise Admins just to test the server to see if it would remove me. I also tried other various groups both builtin and custom.

 

[porkchopexpress]

Is it possible that someone has enabled Restricted Groups.

http://www.microsoft.com/technet/pr...Ref/156780ef-eb36-4433-b3fe-1b1a15c18f6a.mspx

 

[rayen99]

Thanks a ton for your helpful post. That was the problem. Another company provides us with offsite backup storage and the admins there created a restricted groups group policy for Domain Admins. I'm surprised that Windows doesn't give an onscreen "permissions denied" error when you try to add a user to a restricted group that's disallowed. Anyway thanks again.