Re: Active Directory replicating changes question

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

If they belong to a group and new permissions are applied those take effect
immediately, but any membership changes only take effect after logging off
and logging back on.

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.


"Anthony" <Anthony@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B36CD01E-DFC2-470C-8444-D15284130F33@xxxxxxxxxxxxxxxx
> Thank you Paul for your response. So if I understand you correctly, if a
> users is logged on and an admin goes into AD and changes permissions on
that
> particular user or adds them to a group they currently do are not added
to,
> then the new changes will not take affect until they log off and log back
on.
> Correct?
>
> "Paul Bergson" wrote:
>
> > Replication is the mechanism to get all dc's in sync with one another.
Once
> > they have the same metadata when you authenticate you will get the same
> > token of group membership. This token stays with you whether you are
added
> > or removed from groups. That is why until you log off and log back on
your
> > access doesn't change.
> >
> > --
> >
> >
> > Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
> >
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> >
> >
> > "Anthony" <Anthony@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:4FD34536-EF9F-4622-BD1E-99BDF6331741@xxxxxxxxxxxxxxxx
> > > Hello all,
> > >
> > > I have a question about replication. If I take a user in AD and add
them
> > to
> > > a group that has permissions to a folder on a network, will the
> > permissions
> > > that I have added for them to access the folder in AD take effect
right
> > away?
> > > Or does replication in AD have to occur?
> > >
> > > Also, I have tested this and the users have to log off and log back on
to
> > > get new permission that have been added in AD. Is this normal? I am
> > running
> > > Win. Server 2003
> >
> >
> >


.

Relevant Pages

  • Re: Public folder auditing?
    ... Monitor Permissions Events in Event Viewer ... You can use diagnostic logging to record permissions events to the ... You can use the Diagnostics Logging tab in the Properties of a server ... For detailed steps about how to set the Logons and Access Control ...
    (microsoft.public.exchange.admin)
  • RE: Spreadsheet defaults to Read Only for ONE user...
    ... The user in question just tried logging in to someone else's pc (who can use ... Read/Write password, but is taken straight into Read Only. ... Now, we thought this was a permissions thing for the folder, which was ...
    (microsoft.public.excel.misc)
  • Re: Group Policy Modeling Wizard - Access Denied
    ... I get an access denied/insufficient permissions message. ... domain admin access so that's not an option. ... Read & allow planning and logging would cover me but obviously not. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Sound Permissions on FC4
    ... Is your wife logging in at the same time you are, ... The permissions to /dev/dsp are set to the first person who logs in to ...
    (linux.redhat)
  • Re: Additional suggestions for previous post "Distribution Manager error 2324 1/4/05"??
    ... logging is valid for both SMS 2.0 and SMS 2003, ... Share permissions of Everyone at Full Control ... Currently the software distribution ...
    (microsoft.public.sms.swdist)