Group removal...

I posted a while ago concerning a group being removed from an ID and not knowing who was doing it.

http://www.techexams.net/forums/viewtopic.php?t=22544

Still happening on and off and rather than necro a thread thought I should start a new one.

Anyone have any new ideas or any of the new guys have a thought?

[Edit - The account has been renamed from first.last to first.x.last, so someone must be looking for it to remove the group]

Cheers.

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

sprkymrk

Sie - have you checked Group Policy to see if the administrators group is a restricted group? It might be possible that Group Policy is removing your name rather than another admin.

Sie

Checked and does seem to be any GP's for that....

(Any way to search all OU's for this GP as I dont know where its applied, nothing under security templates > restricted groups etc)

What makes me think it may not be a GP is because its at random, IE doesnt happen every 15mins / 30mins / 90 mins or whatever it could be between 2pm and 5pm on a tuesday and next time is 1am and 4am on a monday.

Will have to do some more investigation.