Disappearing Membership 1

[NetIntruder]

Hey all,

I have a problem where, on occasion, a user will be added to a Domain Global Group and the next day their membership is no longer there. Now, I can see the security event correlating to the addition in the DC's event log, but I do not see anything correlating to a deltion.

At a glance, this would appear that replication is goofy somewhere, but all of the tools report back as normal (UltraSound, MS MPSReports, Replmon, etc)

Any thoughts? At the very least I need to find a way to see what's removing this membership (or overwriting it!).

Thanks!

~Intruder~

"The Less You Do, The Less Can Go Wrong"

 

[mrmoneymatters]

If I am not mistaking you can use group policy to restrict group memberships. What that means is, if you have a group policy restricting group memberships then you add a user to that group, when group policy is refreshed it will remove that user from the group. Let me know if that helps.

 

[NetIntruder]

Yeah, but that does not seem to be the case here. This same group in question (it happens on more than one though) accepted changes the very next day and they did not get overwritten. I will verify the GPO settings, but I'm pretty sure that nobody has this set up in my company.



~Intruder~

"The Less You Do, The Less Can Go Wrong"