RE: Getting a list of roles
From: jzhu (anonymous_at_discussions.microsoft.com)
Date: 05/28/04
- Previous message: MR. UNDERHILL: "Remoting Security"
- In reply to: David Coe, MCP: "RE: Getting a list of roles"
- Next in thread: Joe Kaplan \(MVP - ADSI\): "Re: Getting a list of roles"
- Reply: Joe Kaplan \(MVP - ADSI\): "Re: Getting a list of roles"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 28 May 2004 12:26:04 -0700
Because the group information is already built for the user in the token, so the API call should have almost no cost.
Making DirectoryService call is much more expensive (going across the wire to a domain controller), and you can only get groups that the user is a direct member (so if a user is a member of A and A is a subgroup of B, then B will not show up in the groups). The situation is made easier in Win2003 though.
- Previous message: MR. UNDERHILL: "Remoting Security"
- In reply to: David Coe, MCP: "RE: Getting a list of roles"
- Next in thread: Joe Kaplan \(MVP - ADSI\): "Re: Getting a list of roles"
- Reply: Joe Kaplan \(MVP - ADSI\): "Re: Getting a list of roles"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
