Re: The Users group: a security problem

From: Phillip Windell (_at_.)
Date: 08/17/04 

Date: Tue, 17 Aug 2004 13:26:49 -0500

They must be in at least one group, and one group must be set as the user's
"default group". I suspect since it is still the user's default group and is
the only group involved here that it simply doesn't actually remove them
from it to start with unless they are also in another group and have had the
default group reassigned to the other group. 

-- 
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:OSthIJIhEHA.3992@TK2MSFTNGP11.phx.gbl...
> If you open the user's account properties in ADUC, what groups are they
> members of?
> I have never tried to do this and wouldn't want to remove any users from
the
> users group. I would do an explicit deny instead, to another group. Users
> serves a valuable function.
>
>
> Pieter Delbeke wrote:
> > This is not really what  I had in mind...
> > Excplicit deny'ing has many disadvantages.
> > But, is it normal that I can't get this user out of the 'users' group?
> >
> > "Lanwench [MVP - Exchange]" wrote:
> >
> >> Hmmm - what about creating another group that also contains users,
> >> and explicitly denying access to that group?
>
>

Relevant Pages

  • Re: Spell check does not work in Word 2007?
    ... Microsoft Office MVP ... the registry change that fixed it in those cases was to ... locate registry key ... Rename these to oldDLL and oldLEX (although I suspect that exporting then ...
    (microsoft.public.word.docmanagement)
  • Re: Deactivation
    ... Pay particular attention to everything especially words such as "normally", ... If as I suspect you are ignoring the EULA, that opens a whole new group of ... Jupiter Jones [MVP] ... "Alias" wrote in message> It is possible. ...
    (microsoft.public.windowsxp.general)
  • Re: Farewell?????
    ... Microsoft Word MVP ... I suspect most of the MVPs will do the same. ... Dave Triffid ...
    (microsoft.public.word.newusers)
  • Re: I need a simple synchronization
    ... the whole idea of what you are doing sounds suspect. ... I have one BYTE variable that is shared by main frame and worker thread. ... Would this be a suitable synchronization method ... MVP Tips: http://www.flounder.com/mvp_tips.htm ...
    (microsoft.public.vc.mfc)
  • Re: time() going backwards ??!!
    ... I suspect;you may see some phenomenon of time syncing going on. ... goes and looks for time servers. ... >app sent any sort of message, telling it that the system clock has been ... MVP Tips: http://www.flounder.com/mvp_tips.htm ...
    (microsoft.public.vc.mfc)