JSI Tip 8828. When you run Gpresult.exe on a Windows Server 2003 domain controller, it displays Everybody, and other strange computer account group memberships?

When you run the Gpresult.exe on a Windows Server 2003 domain controller, it should display the following computer account group memberships:

BUILTINAdministratorsEveryone BUILTIN Pre-Windows 2000 Compatible AccessBUILTINUsers Windows Authorization Access GroupNT AUTHORITYNETWORKNT AUTHORITYAuthenticated UsersThis OrganizationComputerName$Domain Controllers

When you run it on one your Windows Server 2003 domain controllers, it displays the following strange memberships:

EverybodyAdministratorsAuthenticated Users

This behavior is indicative of promoting a Windows Server 2003 computer without having previously joined it to a domain as a member server.

To prevent this behavior in the future, join the server to the domain before you promote it.

To correct the problem with your server:

1. Remove the network cable from the problem domain controller.

2. Shutdown and restart the problem domain controller.

3. Establish the network connection.

4. Shutdown and restart the problem domain controller.

5. Run Gpresult.exe to verify that problem is resolved.