Re: Active Directory replicating changes question

Replication is the mechanism to get all dc's in sync with one another. Once
they have the same metadata when you authenticate you will get the same
token of group membership. This token stays with you whether you are added
or removed from groups. That is why until you log off and log back on your
access doesn't change.

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.


"Anthony" <Anthony@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4FD34536-EF9F-4622-BD1E-99BDF6331741@xxxxxxxxxxxxxxxx
> Hello all,
>
> I have a question about replication. If I take a user in AD and add them
to
> a group that has permissions to a folder on a network, will the
permissions
> that I have added for them to access the folder in AD take effect right
away?
> Or does replication in AD have to occur?
>
> Also, I have tested this and the users have to log off and log back on to
> get new permission that have been added in AD. Is this normal? I am
running
> Win. Server 2003


.

Relevant Pages

  • Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
    ... MB> folder in a public one--I believe there is a way to do it securely. ... Attacker predicts filename, creates the file, then keeps it open for all ... By forcing irresolvable replication collision on DFS replicated ... MB> having delete permissions on those files (see ...
    (Full-Disclosure)
  • Re: DFS Replication and Share Permissions
    ... granting no permissions to E:\ will mean that people can't map ... > a remote server, with no tape drive to another server, which does have ... > didn't have to configure replication for three individual shares. ... If you are using Directory Services DFS ...
    (microsoft.public.win2000.active_directory)
  • Re: Delegate Control... Reset Passwords
    ... You can force replication to make the changes immediately to all DCs. ... want that Admins keep the users password. ... that Read and Write permissions in pwdLastSet attribute. ... >>> goal is to reset passwords for users in selected OU's, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Problems installing Exch 2003
    ... Normally when running forestprep you assign permissions for a user account ... to install Exchange 2003 servers. ... > Directory has not replicated all the necessary permissions for the deleted ... > modify Exchange components and that replication is complete before running ...
    (microsoft.public.exchange2000.setup.installation)
  • Re: Post messages in public folders permission denied
    ... the folder properties for that folder to see who has what permissions ... on both the master and replication servers. ... Ken Slovak ...
    (microsoft.public.outlook.program_forms)