Re: What is a user not member of any group?

Look at the Member Of tab in the properties of the User
If there are no groups listed, then the account is not a member
of any true groups. The account however is tokenized with
various pseudogroup based on its usage. Two of these are
Authenticated Users and INTERACTIVE, which you will
often find as members of Users. Hence, even without any
direct memberships in true groups, an account can dynamically
be made member of groups, such as Users.

"Yann" <Yann@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:EA4ABA53-44AD-4D28-8D5C-85B3F718F3FA@xxxxxxxxxxxxxxxx
Hello,

I've created a new local user on my Windows 2000 Server and I've removed
its
membership to the Users group.
To which group(s) does this user still belong to? (is there a script to
determine it? like using a dsquery | dsget -memberof but for local users)

The issue I have is: if on a folder I assign the Read&Execute permissions
for the Users group, my new user (not member of this group) has access to
it.
(???) I don't understand why...

Thanks for your answers
Yann P.


.

Relevant Pages

  • Re: Share Permissions and Security Groups
    ... >> storage on a member server. ... >> If the account is in no group that directly or indirectly has been ... >> resources that are controlled and add the groups of principals ... > From your comments I ensure that each Project Folder NTFS does not inherit ...
    (microsoft.public.security)
  • Re: cannot add local user to local group
    ... The local user account is "test" and a domain name ... Every user object, doesn't matter if domain account or local, has a specific ... member of the domain or the local user account. ... however once I add that user to Administrators ...
    (microsoft.public.win2000.active_directory)
  • Re: cannot add local user to local group
    ... Every user object, doesn't matter if domain account or local, has a specific unique Security identifier. ... So you have to check if the account is member of the domain or the local user account. ... however once I add that user to Administrators ...
    (microsoft.public.win2000.active_directory)
  • mssbsssr/sbsmonacct causing audit failure
    ... it first checks if the user account sbsmonacct exists, ... It is a member of Domain Users, Enterprise Admins, and by implication Users ... a member of either the Remote Operators group or the Domain Power Users ... This happens because on SBS 2003, the "Deny log on locally" policy ...
    (microsoft.public.windows.server.sbs)
  • User cant access OWA or RWW
    ... New staff member aboard; heading out on a business trip so I'm walking her through the process of accessing her email and desktop remotely. ... Keeps getting the note that either her login or password are bad. ... I then used the Add User wizard in Server Management to create a new account for her. ... User not allowed to logon at this computer ...
    (microsoft.public.windows.server.active_directory)
Quantcast