Local User Permissions

[mitchell1981]

Hi All,

Is it normal that when you join a computer to a domain, local accounts are suddenly no longer in the adminstrator group, and therefore lose their admin rights?

This is causing us a few problems and I'm sure it never used to happen.

The main local 'Administrator' account stays as an administrator account, but any other accounts that we have created seem to become standard accounts as soon as we join to the domain.

Any ideas how to stop this happening?

Thanks.

[powdarrmonkey]

Sounds like the Local Groups policy is being pushed out from the domain.

[mitchell1981]

It is, but I didn't realise that it would delete members who are already in the group. This is my current configuration:



If I remove this policy completely will domain admins still have local admin rights over machines?

Thanks.

[SteveBentley]

If you disable that policy then what is set on the machine should apply.