Hi all!
I am working as domain admin on windows server 2008 R2 based DCs. Since last 2 months a strange problem is being observed. Domain admin IDs which are being created often loose their rights. I have set a group policy to make domain Admin IDs by adding the user name in Default Domain Policy --> Computer Configuration --> Policies --> Windows Settings --> Security Settings --> Restricted Group --> Administrator Group.
Previously my admin IDs were working fine and exercising their rights. However, since last 2 months already created admin IDs are working fine, however admin IDs created within these 2 months and being created often loose their admin rights. Although their username remain present in GPO (Administrator Group), but when i check the membership of that user Administrators group don't display there.
for rectification of this issue i run gpupdate /force on the DC and they get back their rights and administrators group starts displaying in Group membership. However, this problem is being observed on daily basis on all newly created IDs.
Another Important point is that I am suffering this issue after deploying Lync 2013 server in my environment. does Lync server may have any connection with this Issue.
Please Help in this regard.
Regards,
Muhammad Tayyab