user getting removed from local administrator group by system
Hi, Im having a strange issue with a windows 7 computer (joined to a domain) where a user seems to lose his administrator right on his computer (with his domain user) we have no group policyes that conflict with the issue, since we have other computers in the same ou that does not have the same problem. when I look trough the security log I find this, A member was removed from a security-enabled local group. Subject: Security ID: SYSTEM Account Name: MACHINENAME$ Account Domain: XXX Logon ID: 0x3e7 Member: Security ID: XXX\username Account Name: - any ideas? I can see any scheduled jobes that should remove the user...
June 20th, 2011 3:46pm

Hi, Please confirm that the group removal operation is in compliance with the security policy of your organization. And check what the recent changes of this computer are. You could try to add the user account to administrator group to test if this issue still occurs, and find what operations are the culprit. You could refer to the following article: Security Enabled Local Group Member Removed Alex ZhaoPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
June 22nd, 2011 12:58pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics