Skip navigation

JSI Tip 8828. When you run Gpresult.exe on a Windows Server 2003 domain controller, it displays Everybody, and other strange computer account group memberships?

When you run the Gpresult.exe on a Windows Server 2003 domain controller, it should display the following computer account group memberships:

BUILTIN\Administrators
Everyone 
BUILTIN\ Pre-Windows 2000 Compatible Access
BUILTIN\Users Windows Authorization Access Group
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
This Organization
ComputerName$
Domain Controllers
When you run it on one your Windows Server 2003 domain controllers, it displays the following strange memberships:
Everybody
Administrators
Authenticated Users
This behavior is indicative of promoting a Windows Server 2003 computer without having previously joined it to a domain as a member server.

To prevent this behavior in the future, join the server to the domain before you promote it.

To correct the problem with your server:

1. Remove the network cable from the problem domain controller.

2. Shutdown and restart the problem domain controller.

3. Establish the network connection.

4. Shutdown and restart the problem domain controller.

5. Run Gpresult.exe to verify that problem is resolved.



Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish