Re: Group Membership being applied more than once

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I'm thinking this could be a symptom of sidHistory. Like Meinolf I have
never seen this before but can't think of anything else that could be doing
this.

http://support.microsoft.com/kb/295758

Be careful upon doing this. I have learned the hard way to make sure all
your security groups have been copied across before cleaning them up. Users
quickly lose access to data if not done correctly.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"nlldavies" <nlldavies@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CBB5617D-AE9B-4556-A43C-AAE48CC44971@xxxxxxxxxxxxxxxx
Hello Meinolf,

Thank you for your response.

An example is I am a member of a security group called "TSUsers".
Performing
a GPRESULT on my laptop will list all security groups that I am a member
of
and that have been applied to me as the logged on user. The list will then
display the same security group membership again and again

I have included a sample below. The example is cut down and does not
include
a full list of security group membership but shows what I am seeing during
a
GPRESULT.

Example
The user is a part of the following security groups:
----------------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Internet-FTP
UK CTX Example1
UK CTX Example2
Internet-FTP
UK CTX Example1
UK CTX Example2
Internet-FTP
UK CTX Example1
UK CTX Example2

Hope this helps.

Rgds








"Meinolf Weber [MVP-DS]" wrote:

Hello nlldavies,

What do you mean with group membership is applied 3 times when they boot
up, please specify this?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Over the past year we have found that group membership for most of our
domain users are being applied more than once when they boot up (in my
case three times).

This has caused problems with applying some groups as the list is
tripled due to duplication so we have had to increase the token size
in kerberos preferences for all users to make sure all groups are
applied.

I'm sure this has started around the time we migrated our users from
and old domain to a new one.

What procedure can I do to clean this duplication up please?

Any help greatly appreciated.






.

Relevant Pages

  • Re: Group Membership being applied more than once
    ... The problem affects all laptops and desktops that were migrated including ... your security groups have been copied across before cleaning them up. ... a full list of security group membership but shows what I am seeing during ... UK CTX Example1 ...
    (microsoft.public.windows.server.active_directory)
  • Re: Rights for certain Security Groups
    ... add the security groups you wish to manage to that OU. ... Then delegate control to modify group membership for that OU. ... Steve Foster [SBS MVP] wrote: ...
    (microsoft.public.windows.server.sbs)
  • Re: Restrict access to groups in Exchange/Outlook?
    ... but I know of no way of showing/hiding based on group membership. ... various Users, Computers and Security Groups. ... "Dennis Mutsaers" wrote in message ... > So if I'm not in the group managers I am not able to post to the group ...
    (microsoft.public.windows.server.sbs)
  • Re: Restrict access to groups in Exchange/Outlook?
    ... but I know of no way of showing/hiding based on group membership. ... various Users, Computers and Security Groups. ... "Dennis Mutsaers" wrote in message ... > So if I'm not in the group managers I am not able to post to the group ...
    (microsoft.public.exchange.admin)