Re: Group Membership being applied more than once

Hello nlldavies,

Never saw that before. What OS version are you using on the client? Is it fully patched with SP's etc.?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Hello Meinolf,

Thank you for your response.

An example is I am a member of a security group called "TSUsers".
Performing a GPRESULT on my laptop will list all security groups that
I am a member of and that have been applied to me as the logged on
user. The list will then display the same security group membership
again and again

I have included a sample below. The example is cut down and does not
include a full list of security group membership but shows what I am
seeing during a GPRESULT.

Example
The user is a part of the following security groups:
----------------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Internet-FTP
UK CTX Example1
UK CTX Example2
Internet-FTP
UK CTX Example1
UK CTX Example2
Internet-FTP
UK CTX Example1
UK CTX Example2
Hope this helps.

Rgds

"Meinolf Weber [MVP-DS]" wrote:

Hello nlldavies,

What do you mean with group membership is applied 3 times when they
boot up, please specify this?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Over the past year we have found that group membership for most of
our domain users are being applied more than once when they boot up
(in my case three times).

This has caused problems with applying some groups as the list is
tripled due to duplication so we have had to increase the token size
in kerberos preferences for all users to make sure all groups are
applied.

I'm sure this has started around the time we migrated our users from
and old domain to a new one.

What procedure can I do to clean this duplication up please?

Any help greatly appreciated.



.

Relevant Pages

  • Re: Determine AD group membership
    ... Note that this will only give you security group info. ... As more and more LDAP based applications start using distribution lists for their internal security instead of Windows security groups this will play more and more into apps that need to monitor group membership. ... Kerberos tickets PAC data to get this info? ...
    (microsoft.public.platformsdk.security)
  • Slow login due to group participation
    ... the logon takes about 3 minutes. ... aren't added to this single security group, ... Is there some way to determine where exactly the problem lies short of ... the group membership? ...
    (microsoft.public.windows.server.general)
  • Re: how to restrict users to search in their own Organizational Unit
    ... 1- Create a Security Group and deny the read permission to certain OUs then Place the MOSS administrators that Security group so they can't have read access to that OUS. ... Now, as Herb stated in last post, you can have problems related to the maintenance of the group membership, because you're dealling with many OUs and Users, so you should write a script to automate the process of mantaining the group membership, and you can also use another script to define the new permissions, add users etc. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegating mailbox rights
    ... It's because your group membership gets enumerated at login. ... and later get added to a security group, ... membership and so at that point you can get access to the target mailbox. ...
    (microsoft.public.exchange.admin)
  • Re: Group Membership being applied more than once
    ... An example is I am a member of a security group called "TSUsers". ... display the same security group membership again and again ... GPRESULT. ... UK CTX Example1 ...
    (microsoft.public.windows.server.active_directory)