GPUPDATE deleting Power Users!

[Fluke]

Hi all,

it seems that for some reason gpupdate is deleting any power users. I thought that I was going mad as I was making users power users on thier pc only to find a few days later that they weren't.

I've tested it with gpupdate /force and it does it every time. Oddly, any other type of user/group remains - it only deletes the power users.

 

Does anyone have any ideas?

[ArchersIT]

Do any of your group policies specify that certain people should be members of the power users group? This will override any local settings and reset them back to the group policy specified ones.

 

Jonathan

[gshaw]

Run rsop.msc and see if you have any restricted groups policies enabled (Computer Configuration, Windows Settings, Security, Restricted Groups)

 

That will nuke members manually added to local groups if they're not present in the policy

[chazzy2501]

This can be done with client side extensions, if these are xp machines RSOP.msc will not show it.