Active directory administrator rights dropping off
Hi,
We currently have some Mac Pros binded to our network domain and we are using the Directory Utility (Active Directory).
We have a security group within our domain called 'Mac Administrators' whereby we add users who we wish the ability to administer Macs. I am using the 'Allow Administration by' section in Login Options > Network Account Server > Open Direct Utility > Active Directory > Advanced Options > Administrative.
I then enter the name of the security group that my mac admins are members of and save.
This does provide admin rights for the specified users for a while but we have seen it consistently drop off at random times. I have tried to pinpoint what is causing it to drop off such as password changes, mac reboots etc but I have been unable to find a pattern. It can last from 24 hours to a week.
Removing the administrator group on the mac and re-setting it back up does indeed give the admin credentials back but only for a certain amount of time before it drops off again.
This is driving me crazy has anyone experienced this with their administration?? Help!!!!
Thanks,
Tom
Mac Pro, OS X El Capitan (10.11.1)