I have setup two new users who are required to have domain admin membership. However, they come in the next day and their membership in this group is missing. I have tried setting them up from new. I have tried copying a user with the same privileges and every morning I have to reinstate their membership in the domain admin group. I have found one article which explains how the AdminSDHolder object will go through and reset group memberships as a security measure but how do I get it to stop removing the domain admin group from these two accounts? Any help would be greatly appreciated.