Renewing Kerberos ticket

From: Amihai Bareket (amihai73_at_hotmail.com)
Date: 03/01/05 

Date: Tue, 1 Mar 2005 07:49:35 +0200

I'm working with a script that's creating new AD Security groups and
changing their membership.
The user that runs the script is added as a member of the new groups.
Once the groups are created I need the script to create folders and set ACL
on these folders using the new groups.
Because the groups are newly created, the information that indicates that
the logged in user (the one that's running the script) is a member of the
new groups is not included in the Kerberos ticket he's been granted on
logon.
The permission change on the file system fails because of this with an
access denied message (makes sense...). I'm using XCACLS to set the
permissions on the new folders.

Is there a way to request a renewal to a user's Kerberos ticket from a
script or batch so that he will receive a new or renewed ticket with the new
group information?

Relevant Pages

  • Re: active directory question
    ... Thank you for the time you took to review this script. ... Later you seem to use ADO to find the trustee. ... The only attribute you need retrieve is "member". ...
    (microsoft.public.scripting.vbscript)
  • Re: Script to populate Distribution list
    ... that list several diffrent zip codes for the same location is there a way to ... > ' Check if user already a member of the group. ... This would slow the script ... > methods require the AdsPath of the user. ...
    (microsoft.public.scripting.vbscript)
  • Re: Error using LDAP query
    ... I know you said this line is failing: ... CreateObject) failed to set oADSysInfo to a valid object. ... try running this simple script as a user (non-Domain ... >> member of at least 2 other groups, ...
    (microsoft.public.windows.server.scripting)
  • Re: Login Script group membership
    ... Would it be more managable to write this as a vbs instead of a batch file? ... script, as not all o/s's can run a .vbs file directly as a logon script. ... - you'd need to write a wrapper function to invoke ifmember and return the ... In the general case a user can be a member of any number of ...
    (microsoft.public.windows.server.scripting)
  • Re: I need to change the group membership using a logon script
    ... admins group in order to run the script. ... I believe users need to be members of the local Administrators group to run ... "Domain Admins" is made a member of the local Administrators group on the ... Administrators groups on the computers. ...
    (microsoft.public.scripting.vbscript)