W2003 Ad question
I noticed some string things with our ad. We are using several dc's(about 4) and i noticed that sometimes, when i add users to a group, several hours later these users arent a member anymore from that group. Can some1 advice me; what can me the cause of
this, how should i start troubleshooting??
thanks in advance
July 19th, 2010 11:53am
Hi,
You should turn on auditing for changes to objects on your AD. Please refer to the following link for a step-by-step how-to:
AD DS Auditing Step-by-Step Guide
http://technet.microsoft.com/en-us/library/cc731607(WS.10).aspx
Regards,
Salvador Manaois III
C|EH MCSE MCSA MCTS MCITP(x4)
----------------------------------------------------------------------------
Bytes & Badz:
http://badzmanaois.blogspot.com
My Passion:
http://www.flickr.com/photos/badzmanaois
My Scripting Blog: http://sgwindowsgroup.org/blogs/badz
Free Windows Admin Tool Kit Click here and download it now
July 19th, 2010 12:10pm
Hi salvador,
thanks for the reply. can i enable it with default settins? And for what should i look after enabeling?
Is it maybe a replication problem??
thanks
July 19th, 2010 12:37pm
HEllo,
sounds for me that you have used protected security groups with AdminSDHolder:
http://technet.microsoft.com/en-us/magazine/2009.09.sdadminholder.aspxBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
July 19th, 2010 1:49pm
Hi Meinolf,
Thanks for the reply.
Is it possible to explain that a little bit more cause it doesnt ring bells(i did read the article but this is new for me)
thanks
July 20th, 2010 10:14am
Hello,
make sure the users are not member of any of the mentioned security groups under "Protected Groups" in the article, that belong to the AdminSDHolder, all configured permisisions will be reset after one hour.
Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
July 20th, 2010 11:44am
Hi,
How are you? We've not heard back from you in a few days and wanted to check if there is anything further we could help.
If there is anything unclear, please do not hesitate to respond back.
Thanks.This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can
be beneficial to other community members reading the thread.
July 26th, 2010 5:14am
Hi Joson,
I am still investigating the problem although lately the problem didnt occur.
So for the moment there is nothing to investigate for me.
regards
Free Windows Admin Tool Kit Click here and download it now
August 17th, 2010 11:40am