Dissapearing rights

[IainM]

Hi

I added the user account that was create for a scanner to the administrators
group on a local machine because the scanning software would not run
properly without admin rights.

However when I logged on the following day the scanner software produced an
error. On looking at the local administrators group I found that the scanner
account was no longer part of it.

I geuse that a domain policy is overwrighting the local machine setting but
can't track it down.

Anyone got any ideas?

IainM

 

[stevta [MSFT]]

gpttmpl.inf file will hold the settings for your
restricted groups for each policy. You can examine each
file in notepad and see which policy contains restricted
group settings.
If you create a restricted group setting any account that
is in the local administrators group would be removed and
replaced with whatever is in the GPO.
Steve