Question

  • Creator
    Topic
  • #2254965

    Local Admin Account

    Locked

    by gabeguerra ·

    I have a couple of software testers who install/uninstall software often. they are logging into a domain with their domain user credentials. I have added their domain user account to their local admin group on their laptops. My problem is that after a certain amount of time their domain user account is removed from the local admin group. Does anybody know why or ever had this problem?

    Thank you for your input!

All Answers

  • Author
    Replies
    • #2539892

      Clarifications

      by gabeguerra ·

      In reply to Local Admin Account

      Clarifications

    • #2539879

      A few thoughts

      by w2ktechman ·

      In reply to Local Admin Account

      Are they blowing away their systems every now and then?
      Are they running a virus?
      Could they be removing this access?

      • #2539850

        Thoughts

        by gabeguerra ·

        In reply to A few thoughts

        No they are not blowing away their systems because they also use the laptops for e-mail and other day to day tasks.

        we are running mcafee enterprise 8.0.0

        i don’t think they are removing the access cause they have to stop what they are doing so i can grant local admin rights to reboot. so i don’t think they would be going thru all the trouble if they did.

        Thanks for the quick response!

        • #2539831

          New Thought

          by w2ktechman ·

          In reply to Thoughts

          1 of the SW packages that was being tested may have a problem with it. Try rebuilding 1 system and see if it still happens.
          Another thought would be to have them list out the apps that they open or use. The next day, if it has happened again, you should be able to look into a smaller amout of apps that may be causing the issue.
          Or run a reg tool which shows registry changes, and when they occur.

    • #2605764

      Group Policy

      by darrenmaspero ·

      In reply to Local Admin Account

      Check your restricted groups in group policy.

      If the administrators group is set up it will remove any user or group that is not on the list when group policy refreshes.

Viewing 2 reply threads