account loses admin rights

[sentmemail]

hi,
i have created a new account with administrator rights on the server, but
it loses its rights automatically after sometime during the day.
Could it be due to the blank gpo that i have put in the server's OU ??
pls advice
thanks

 

[Maximus1]

Since you talking about OU's I'm assuming you dealing with a 2000 server. Could you provide any more information on your setup? Is this server a stand-alone server or part of an AD domain? If there are additional domain controllers you could be having replication issues between controllers. If this is a single server you have probably inadvertently set a policy that is overriding your account rights.

 

[spyordie007]

If there are additional domain controllers you could be having replication issues between controllers.

That's the first thing that popped into my head.

-Spy

 

[sentmemail]

server is part of an AD domain

 

[Maximus1]

Are there additional domain controllers besides the one you are having problems with?

If so you want to check your File Replication Service event log. You will probably see errors on one of the domain controllers that prevents changes/updates to your user database (among other things) from being replicated between servers. What is probably happening is you are making the change to the user account on one server but then 15 minutes later when the servers go to replicate, your changes to the account are overriden since one of the other domain controllers never received the replication. If you do see errors in the event log check on microsoft's support site or at Eventid.net which has proven very useful for me in the past. My guess is there is some kind of corruption in the jet database on your one domain controller that you will have to repair. I had a similar problem happen a while back and it wasn't a big deal to fix.

Let us know how you make out...

 

[spyordie007]

Originally posted by: sentmemail
server is part of an AD domain

So to make sure I'm getting this correct you are running under an AD and this server is a DC and on this server you are trying to create a new domain login (not a local login) and give it local admin rights?

Some questions to answer if that statement is not correct:
Are you trying to give a domain login local admin rights?
Is this server a DC? (because It's not clear whether this is a DC or if it just has the adminpak installed).
Where are you applying the local admin rights? The MMC "Local Users and Groups" or from the "Active Directory Users and Computers" Snap-in?

-Spy

EDIT: Finally got this clear methinks...

 

[sentmemail]

i am applying the local admin rights from The MMC "Local Users and Groups"

 

[spyordie007]

Originally posted by: sentmemail
i am applying the local admin rights from The MMC "Local Users and Groups"

So this server is not a DC but you are giving a domain account local admin rights on it correct?

-Spy

 

[sentmemail]

nope, i am giving a local account , local admin rights

Originally posted by: spyordie007

Originally posted by: sentmemail
i am applying the local admin rights from The MMC "Local Users and Groups"

So this server is not a DC but you are giving a domain account local admin rights on it correct?

-Spy