I have a domain controller I am checking our security settings on. I have 2 User Rights Assignments coming up with a problem. The Default Domain Controller Policy is set to enforce that Administrators are the only group in Add computer to the domain and Restore Files From Backup.
Now the RSOP shows the setting as what it should be but has the Red X on it. So it is possible it was not set.
When I check our security took it shows it is set ONLY on this domain controller that Administrators & Server Operators are set to both user assignments. Checking where that is set shows that the local security policy on the Domain Controller is set to Administrators & Server Operators.
I removed the permissions from the Default Domain Controller Policy and put it another GPO and after gpupdate the DC shows the setting not set in RSOP. So I set it back in just Default Domain Controller Policy and it again says it doesn't apply.
Is there anything i can check to get these 2 user rights assignments to only be set to Administrators?