Hi,
We have a small domain for our organisation. when we include a machine in doamin, as soon as the machine gets in domain "DOMAIN USERS" groups get added in local machine "USERS" group in local user and groups.
If i remove the DOMAIN USERS from the USER group. After policy gets refreshed or restrat the it again appears in the list.
Due to the any domain user is able to access this machine instead only the one to whom its been assigned.
In our GPO we have not mention this policy to add any group in local machine USERS group.
IS this a default behaviuor of windows ? How can i oversome this issue? I want to add manually a user account in the local USER GROUP list which will not be removed by policy.