Users lose group assignment nightly

[jpm121]

We have a 2K server running AD. I assigned users to a security group on Wednesday (using AD Users..), verified operation, and left. Next morning the users are no longer members of the group! I added them again, and they worked fine for a day, then the next morning the entries were gone again.

Is there another step I need to lock these changes in place or something? The only thing going on at night is a Veritas backup -- no other nightly processing.

Ideas? Thanks....

 

[Davetoo]

Any GPO's or scripts that are overriding your settings?

I'm Certifiable, not certified.
It just means my answers are from experience, not a book.

 

[jpm121]

lander, I don't think so. This is a very "vanilla" server install -- no scripts that I'm aware of.

 

[mlichstein]

What groups did you add them to? One of the built-ins or a group you created?

It could be the AdminSDHolder process, but that runs every hour, not every day.

 

[xmsre]

Sould like it's a group with restricted membership. Check your group policies.

http://support.microsoft.com/default.aspx?scid=kb;en-us;228496

 

[jpm121]

Hmm.. tek-tips e-mail notification flunked this weekend, I guess.

The group is one that I created, not a built-in one. Simply for ease of controlling access to certain directories, allowing TS login, etc.

xmsre, I'll check that restriction tomorrow and see if that's the problem. Thanks!