AdminSDHolder Object Help

Viewing 1 post (of 1 total)
  • Author
    Posts

  • anonpostguy
    Member
    #130612

    I have setup two new users who are required to have domain admin membership. However, they come in the next day and their membership in this group is missing. I have tried setting them up from new. I have tried copying a user with the same privileges and every morning I have to reinstate their membership in the domain admin group. I have found one article which explains how the AdminSDHolder object will go through and reset group memberships as a security measure but how do I get it to stop removing the domain admin group from these two accounts? Any help would be greatly appreciated.

    Thanking you in advance,
    Anonpostguy

Viewing 1 post (of 1 total)

You must be logged in to reply to this topic.

Don't leave your business open to attack! Come learn how to protect your AD in this FREE masterclass!REGISTER NOW - Thursday, December 2, 2021 @ 1 pm ET

Active Directory (AD) is leveraged by over 90% of enterprises worldwide as the authentication and authorization hub of their IT infrastructure—but its inherent complexity leaves it prone to misconfigurations that can allow attackers to slip into your network and wreak havoc. 

Join this session with Microsoft MVP and MCT Sander Berkouwer, who will explore:

  • Whether you should upgrade your domain controllers to Windows Server
    2019 and beyond
  • Achieving mission impossible: updating DCs within 48 hours
  • How to disable legacy protocols and outdated compatibility options in
    Active Directory

Sponsored by: