Hello all, I'm trying to perform 2 tasks with Group policy preferences on the local machines
1. update the local administrator settings (set no password expiry, add another emergency account we can reset the password for.
2. add another group to the local administrators group (for per site permission control for our staff to local machines).
these tasks work well independantly of each other, however i find that modifying the local admin account, wipes the extra group from the local administrator group.
As soon as I disable the item to update the local admin account and run GPupdate, my group additions begin working again.
Does anyone know why updating the local admin account would affect any group additions to the local administrators group? In my eyes it shouldn't and a Group policy results report indicates that all were applied successfully, but a quick check after reboot shows this to not be true.
Any help appreciated.