I downloaded whoami and installed it on an XP
machine. It has been over one hour since I added the user to a security
group and whoami /groups is not reporting it's group membership. Anything
we can go on from here?
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sakari Kouti
Sent: Tuesday, January 18, 2005 4:01 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Security Rights Problem
Hi Oliver,
If User1 can log on to a WS2003 computer, he or she can
type WHOAMI /GROUPS to see that part of the access
token.
You can also download and install Win2000 version of WHOAMI
at http://www.microsoft.com/downloads/details.aspx?FamilyID=3e89879d-6c0b-4f92-96c4-1016c187d429&DisplayLang=en and
that version seems to work in WinXP also.
Yours, Sakari
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Oliver Rebollido
Sent: Wednesday, January 19, 2005 12:06 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Security Rights ProblemWe did allow the update to replicate. Actually, we let it sit for a month just to see and during that time the user has logged off and on multiple times.How do I check if Group1 is in User1's token when he tries to connect to the resource?
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Tuesday, January 18, 2005 10:08 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Security Rights ProblemHas user1 allowed for the group update that added him to the group to replicate around and then logged off and logged on? I.E. Do you know for sure group1 is in user1's token when he tries to connect to the resource?joe
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Oliver Rebollido
Sent: Tuesday, January 18, 2005 12:46 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Group Security Rights ProblemWe're having a very strange problem with our AD security rights. I'll try to give the best example I can. User1 is part of security Group1. Group1 has access to a secure folder. User1 cannot access the secure folder even though he is part of Group1. The only solution we have done so far is to give User1 security rights at the user and group level. User1 is now able to access the folder. Once we remove User1 from folder's security settings, he's also able to access the folder with Group1's rights.
Has anyone experienced anything like this? If so, can you point me to a solution? Thanks in advance.
ATTENTION The information contained in this message may be legally privileged and confidential. It is intended to be read only by the individual or entity to whom it is addressed or by their designee. If the reader of this message is not the intended recipient, you are on notice that any distribution of this message, in any form, is strictly prohibited. If you have received this message in error, please immediately notify the sender and/or Fenwick & West LLP by telephone at (650) 988-8500 and delete or destroy any copy of this message.
