RE: [ActiveDir] Group Security Rights Problem

2005-01-19 Thread joe
Title: Group Security Rights Problem



You have to log off and log on. 


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Oliver 
RebollidoSent: Wednesday, January 19, 2005 1:35 PMTo: 
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Security 
Rights Problem

I downloaded whoami and installed it on an XP 
machine.  It has been over one hour since I added the user to a security 
group and whoami /groups is not reporting it's group membership.  Anything 
we can go on from here?


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Sakari 
KoutiSent: Tuesday, January 18, 2005 4:01 PMTo: 
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Security 
Rights Problem

Hi Oliver,
 
If User1 can log on to a WS2003 computer, he or she can 
type WHOAMI  /GROUPS  to see that part of the access 
token.
 
You can also download and install Win2000 version of WHOAMI 
at http://www.microsoft.com/downloads/details.aspx?FamilyID=3e89879d-6c0b-4f92-96c4-1016c187d429&DisplayLang=en and 
that version seems to work in WinXP also.
 
Yours, Sakari
 

  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Oliver 
  RebollidoSent: Wednesday, January 19, 2005 12:06 AMTo: 
  ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Security 
  Rights Problem
  
  We did allow the update to replicate.  Actually, we 
  let it sit for a month just to see and during that time the user has logged 
  off and on multiple times.
   
  How do I check if Group1 is in User1's token when he 
  tries to connect to the resource?
  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of 
  joeSent: Tuesday, January 18, 2005 10:08 AMTo: 
  ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Security 
  Rights Problem
  
  Has user1 allowed for the group update that added him to 
  the group to replicate around and then logged off and logged on? I.E. Do you 
  know for sure group1 is in user1's token when he tries to connect to the 
  resource?
    
     joe
  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Oliver 
  RebollidoSent: Tuesday, January 18, 2005 12:46 PMTo: 
  ActiveDir@mail.activedir.orgSubject: [ActiveDir] Group Security 
  Rights Problem
  
  We're having a very strange problem with our AD 
  security rights.  I'll try to give the best example I can.  User1 is 
  part of security Group1.  Group1 has access to a secure folder.  
  User1 cannot access the secure folder even though he is part of Group1.  
  The only solution we have done so far is to give User1 security rights at the 
  user and group level.  User1 is now able to access the folder.  Once 
  we remove User1 from folder's security settings, he's also able to access the 
  folder with Group1's rights.
  Has anyone experienced anything like this?  
  If so, can you point me to a solution?  Thanks in advance. 
  


  ATTENTION The information 
contained in this message may be legally privileged and confidential. It 
is intended to be read only by the individual or entity to whom it is 
addressed or by their designee. If the reader of this message is not the 
intended recipient, you are on notice that any distribution of this 
message, in any form, is strictly prohibited. If you have received this 
message in error, please immediately notify the sender and/or Fenwick 
& West LLP by telephone at (650) 988-8500 and delete or destroy any 
copy of this message. 



RE: [ActiveDir] Group Security Rights Problem

2005-01-19 Thread Oliver Rebollido
Title: Group Security Rights Problem



I downloaded whoami and installed it on an XP 
machine.  It has been over one hour since I added the user to a security 
group and whoami /groups is not reporting it's group membership.  Anything 
we can go on from here?


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Sakari 
KoutiSent: Tuesday, January 18, 2005 4:01 PMTo: 
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Security 
Rights Problem

Hi Oliver,
 
If User1 can log on to a WS2003 computer, he or she can 
type WHOAMI  /GROUPS  to see that part of the access 
token.
 
You can also download and install Win2000 version of WHOAMI 
at http://www.microsoft.com/downloads/details.aspx?FamilyID=3e89879d-6c0b-4f92-96c4-1016c187d429&DisplayLang=en and 
that version seems to work in WinXP also.
 
Yours, Sakari
 

  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Oliver 
  RebollidoSent: Wednesday, January 19, 2005 12:06 AMTo: 
  ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Security 
  Rights Problem
  
  We did allow the update to replicate.  Actually, we 
  let it sit for a month just to see and during that time the user has logged 
  off and on multiple times.
   
  How do I check if Group1 is in User1's token when he 
  tries to connect to the resource?
  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of 
  joeSent: Tuesday, January 18, 2005 10:08 AMTo: 
  ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Security 
  Rights Problem
  
  Has user1 allowed for the group update that added him to 
  the group to replicate around and then logged off and logged on? I.E. Do you 
  know for sure group1 is in user1's token when he tries to connect to the 
  resource?
    
     joe
  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Oliver 
  RebollidoSent: Tuesday, January 18, 2005 12:46 PMTo: 
  ActiveDir@mail.activedir.orgSubject: [ActiveDir] Group Security 
  Rights Problem
  
  We're having a very strange problem with our AD 
  security rights.  I'll try to give the best example I can.  User1 is 
  part of security Group1.  Group1 has access to a secure folder.  
  User1 cannot access the secure folder even though he is part of Group1.  
  The only solution we have done so far is to give User1 security rights at the 
  user and group level.  User1 is now able to access the folder.  Once 
  we remove User1 from folder's security settings, he's also able to access the 
  folder with Group1's rights.
  Has anyone experienced anything like this?  
  If so, can you point me to a solution?  Thanks in advance. 
  


  ATTENTION The information 
contained in this message may be legally privileged and confidential. It 
is intended to be read only by the individual or entity to whom it is 
addressed or by their designee. If the reader of this message is not the 
intended recipient, you are on notice that any distribution of this 
message, in any form, is strictly prohibited. If you have received this 
message in error, please immediately notify the sender and/or Fenwick 
& West LLP by telephone at (650) 988-8500 and delete or destroy any 
copy of this message. 



RE: [ActiveDir] Group Security Rights Problem

2005-01-18 Thread Sakari Kouti
Title: Group Security Rights Problem



Hi Oliver,
 
If User1 can log on to a WS2003 computer, he or she can 
type WHOAMI  /GROUPS  to see that part of the access 
token.
 
You can also download and install Win2000 version of WHOAMI 
at http://www.microsoft.com/downloads/details.aspx?FamilyID=3e89879d-6c0b-4f92-96c4-1016c187d429&DisplayLang=en and 
that version seems to work in WinXP also.
 
Yours, Sakari
 

  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Oliver 
  RebollidoSent: Wednesday, January 19, 2005 12:06 AMTo: 
  ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Security 
  Rights Problem
  
  We did allow the update to replicate.  Actually, we 
  let it sit for a month just to see and during that time the user has logged 
  off and on multiple times.
   
  How do I check if Group1 is in User1's token when he 
  tries to connect to the resource?
  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of 
  joeSent: Tuesday, January 18, 2005 10:08 AMTo: 
  ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Security 
  Rights Problem
  
  Has user1 allowed for the group update that added him to 
  the group to replicate around and then logged off and logged on? I.E. Do you 
  know for sure group1 is in user1's token when he tries to connect to the 
  resource?
    
     joe
  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Oliver 
  RebollidoSent: Tuesday, January 18, 2005 12:46 PMTo: 
  ActiveDir@mail.activedir.orgSubject: [ActiveDir] Group Security 
  Rights Problem
  
  We're having a very strange problem with our AD 
  security rights.  I'll try to give the best example I can.  User1 is 
  part of security Group1.  Group1 has access to a secure folder.  
  User1 cannot access the secure folder even though he is part of Group1.  
  The only solution we have done so far is to give User1 security rights at the 
  user and group level.  User1 is now able to access the folder.  Once 
  we remove User1 from folder's security settings, he's also able to access the 
  folder with Group1's rights.
  Has anyone experienced anything like this?  
  If so, can you point me to a solution?  Thanks in advance. 
  


  ATTENTION The information 
contained in this message may be legally privileged and confidential. It 
is intended to be read only by the individual or entity to whom it is 
addressed or by their designee. If the reader of this message is not the 
intended recipient, you are on notice that any distribution of this 
message, in any form, is strictly prohibited. If you have received this 
message in error, please immediately notify the sender and/or Fenwick 
& West LLP by telephone at (650) 988-8500 and delete or destroy any 
copy of this message. 



RE: [ActiveDir] Group Security Rights Problem

2005-01-18 Thread joe
Title: Group Security Rights Problem



You can use whoami /groups 
 
or 
 
download and use sectok from www.joeware.net.
 
   joe


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Oliver 
RebollidoSent: Tuesday, January 18, 2005 5:06 PMTo: 
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Security 
Rights Problem

We did allow the update to replicate.  Actually, we 
let it sit for a month just to see and during that time the user has logged off 
and on multiple times.
 
How do I check if Group1 is in User1's token when he tries 
to connect to the resource?


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of 
joeSent: Tuesday, January 18, 2005 10:08 AMTo: 
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Security 
Rights Problem

Has user1 allowed for the group update that added him to 
the group to replicate around and then logged off and logged on? I.E. Do you 
know for sure group1 is in user1's token when he tries to connect to the 
resource?
  
   joe


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Oliver 
RebollidoSent: Tuesday, January 18, 2005 12:46 PMTo: 
ActiveDir@mail.activedir.orgSubject: [ActiveDir] Group Security 
Rights Problem

We're having a very strange problem with our AD 
security rights.  I'll try to give the best example I can.  User1 is 
part of security Group1.  Group1 has access to a secure folder.  User1 
cannot access the secure folder even though he is part of Group1.  The only 
solution we have done so far is to give User1 security rights at the user and 
group level.  User1 is now able to access the folder.  Once we remove 
User1 from folder's security settings, he's also able to access the folder with 
Group1's rights.
Has anyone experienced anything like this?  If 
so, can you point me to a solution?  Thanks in advance. 

  
  
ATTENTION The information 
  contained in this message may be legally privileged and confidential. It 
  is intended to be read only by the individual or entity to whom it is 
  addressed or by their designee. If the reader of this message is not the 
  intended recipient, you are on notice that any distribution of this 
  message, in any form, is strictly prohibited. If you have received this 
  message in error, please immediately notify the sender and/or Fenwick 
  & West LLP by telephone at (650) 988-8500 and delete or destroy any 
  copy of this message. 


RE: [ActiveDir] Group Security Rights Problem

2005-01-18 Thread Oliver Rebollido
Title: Group Security Rights Problem



We did allow the update to replicate.  Actually, we 
let it sit for a month just to see and during that time the user has logged off 
and on multiple times.
 
How do I check if Group1 is in User1's token when he tries 
to connect to the resource?


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of 
joeSent: Tuesday, January 18, 2005 10:08 AMTo: 
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Security 
Rights Problem

Has user1 allowed for the group update that added him to 
the group to replicate around and then logged off and logged on? I.E. Do you 
know for sure group1 is in user1's token when he tries to connect to the 
resource?
  
   joe


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Oliver 
RebollidoSent: Tuesday, January 18, 2005 12:46 PMTo: 
ActiveDir@mail.activedir.orgSubject: [ActiveDir] Group Security 
Rights Problem

We're having a very strange problem with our AD 
security rights.  I'll try to give the best example I can.  User1 is 
part of security Group1.  Group1 has access to a secure folder.  User1 
cannot access the secure folder even though he is part of Group1.  The only 
solution we have done so far is to give User1 security rights at the user and 
group level.  User1 is now able to access the folder.  Once we remove 
User1 from folder's security settings, he's also able to access the folder with 
Group1's rights.
Has anyone experienced anything like this?  If 
so, can you point me to a solution?  Thanks in advance. 

  
  
ATTENTION The information 
  contained in this message may be legally privileged and confidential. It 
  is intended to be read only by the individual or entity to whom it is 
  addressed or by their designee. If the reader of this message is not the 
  intended recipient, you are on notice that any distribution of this 
  message, in any form, is strictly prohibited. If you have received this 
  message in error, please immediately notify the sender and/or Fenwick 
  & West LLP by telephone at (650) 988-8500 and delete or destroy any 
  copy of this message. 


RE: [ActiveDir] Group Security Rights Problem

2005-01-18 Thread joe
Title: Group Security Rights Problem



Has user1 allowed for the group update that added him to 
the group to replicate around and then logged off and logged on? I.E. Do you 
know for sure group1 is in user1's token when he tries to connect to the 
resource?
  
   joe


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Oliver 
RebollidoSent: Tuesday, January 18, 2005 12:46 PMTo: 
ActiveDir@mail.activedir.orgSubject: [ActiveDir] Group Security 
Rights Problem

We're having a very strange problem with our AD 
security rights.  I'll try to give the best example I can.  User1 is 
part of security Group1.  Group1 has access to a secure folder.  User1 
cannot access the secure folder even though he is part of Group1.  The only 
solution we have done so far is to give User1 security rights at the user and 
group level.  User1 is now able to access the folder.  Once we remove 
User1 from folder's security settings, he's also able to access the folder with 
Group1's rights.
Has anyone experienced anything like this?  If 
so, can you point me to a solution?  Thanks in advance. 

  
  
ATTENTION The information 
  contained in this message may be legally privileged and confidential. It 
  is intended to be read only by the individual or entity to whom it is 
  addressed or by their designee. If the reader of this message is not the 
  intended recipient, you are on notice that any distribution of this 
  message, in any form, is strictly prohibited. If you have received this 
  message in error, please immediately notify the sender and/or Fenwick 
  & West LLP by telephone at (650) 988-8500 and delete or destroy any 
  copy of this message. 


[ActiveDir] Group Security Rights Problem

2005-01-18 Thread Oliver Rebollido
Title: Group Security Rights Problem






We're having a very strange problem with our AD security rights.  I'll try to give the best example I can.  User1 is part of security Group1.  Group1 has access to a secure folder.  User1 cannot access the secure folder even though he is part of Group1.  The only solution we have done so far is to give User1 security rights at the user and group level.  User1 is now able to access the folder.  Once we remove User1 from folder's security settings, he's also able to access the folder with Group1's rights.

Has anyone experienced anything like this?  If so, can you point me to a solution?  Thanks in advance.




ATTENTION
The information contained in this message may be legally privileged
and confidential.  It is intended to be read only by the individual
or entity to whom it is addressed or by their designee. If the reader
of this message is not the intended recipient, you are on notice that
any distribution of this message, in any form, is strictly prohibited.
If you have received this message in error, please immediately notify
the sender and/or Fenwick & West LLP by telephone at (650) 988-8500
and delete or destroy any copy of this message.