Re: Active directory groups refresh question

Tech-Archive recommends: Fix windows errors by optimizing your registry

Thanks for your reply. I took your post and started looking for 'token'
on Google in relation to groups and AD and I found TokenGroups. I found
some code that I could modify and now everything is working fine. The
code looks at the AD TokenGroups and converts them to real names. It
handles nested groups and it is updated instantly - as soon as I took a
user out of a nested group the group membership list reflected that.
That's exactly what I needed!

Thanks again!

In article <D0E6936B-5138-49C1-B0FA-BF563FBF97AA@xxxxxxxxxxxxx>,
jcorey@xxxxxxxxxxxxxx says...
There is a difference between querying your local token (which is what
you're doing below) and querying Active Directory for the list of current
groups. When a user logs in, an access token is created that has the users
SID and all SIDs of the groups that the user is a member of. This token is
only created during login so that's why you're seeing this behavior. To
obtain the most current list of groups that a user is a member of, you would
need to query Active Directory for the MemberOf list. I'm not a VB.NET guy,
so sorry for not posting any code.


.

Relevant Pages

  • Re: Get Users Group Membership
    ... The problem I have is that if the user is a member of ... Basically it's not handling nested groups. ... of "tokenGroups" SIDs to that group SID. ...
    (microsoft.public.dotnet.framework)
  • Re: Active directory groups refresh question
    ... It sounds like you modified the tokenGroups attribute directly, ... I assume you enumerated all SID values in the multi-valued tokenGroups ... are you sure the user is no longer a member of the group? ... not mean the backlinked attribute (the member attribute of the group object) ...
    (microsoft.public.windows.server.active_directory)