Re: Group Membership being applied more than once

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hello Meinolf,

Thank you for your response.

An example is I am a member of a security group called "TSUsers". Performing
a GPRESULT on my laptop will list all security groups that I am a member of
and that have been applied to me as the logged on user. The list will then
display the same security group membership again and again

I have included a sample below. The example is cut down and does not include
a full list of security group membership but shows what I am seeing during a
GPRESULT.

Example
The user is a part of the following security groups:
----------------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Internet-FTP
UK CTX Example1
UK CTX Example2
Internet-FTP
UK CTX Example1
UK CTX Example2
Internet-FTP
UK CTX Example1
UK CTX Example2

Hope this helps.

Rgds








"Meinolf Weber [MVP-DS]" wrote:

Hello nlldavies,

What do you mean with group membership is applied 3 times when they boot
up, please specify this?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Over the past year we have found that group membership for most of our
domain users are being applied more than once when they boot up (in my
case three times).

This has caused problems with applying some groups as the list is
tripled due to duplication so we have had to increase the token size
in kerberos preferences for all users to make sure all groups are
applied.

I'm sure this has started around the time we migrated our users from
and old domain to a new one.

What procedure can I do to clean this duplication up please?

Any help greatly appreciated.




.

Relevant Pages

  • Re: Attempting to write my logon scripts - I want to do an IF / ElseIf statement and match to wh
    ... vbscripts and do an IF / ElseIF statement and ... match the user who is logging in up to a security group and that's how ... you want to recognize membership in nested groups, ... Domain environment -- most of my servers are Windows Server 2003 boxes ...
    (microsoft.public.scripting.vbscript)
  • Re: Group Membership
    ... Basically under membership rules you add a direct membership to the AD Group that you wish to use to distribute software, you can then uncheck the 'update collection' checkbox because it is now the clients responsibility to validate its membership to the collection and get the advertisements. ... that will determine if they are a member of that security group. ... security tokens and give them access the advert. ... >I have tried doing it this way, What becomes the update cycle? ...
    (microsoft.public.sms.swdist)
  • Re: Group Membership
    ... Basically under membership rules you add a direct membership to the AD Group ... that will determine if they are a member of that security group. ... the client or how does this work? ... Once the security group is discovered, the advert can be ...
    (microsoft.public.sms.swdist)
  • Re: Delay for nexted security group membership?
    ... The DCs will have that information as soon as replication occurs. ... I have security group A and put the Domain Users group in to security ... How long does it take AD to recognize this nested group membership? ... Microsoft MVP Scripting and ADSI ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delay for nexted security group membership?
    ... I have security group A and put the Domain Users group in to security group ... How long does it take AD to recognize this nested group membership? ... Richard Mueller ... Microsoft MVP Scripting and ADSI ...
    (microsoft.public.windows.server.active_directory)