Re: newbie: Everyone groups works, but not a user defined group

From: Derek Melber [MVP] (derekm_at_braincore.net)
Date: 03/31/04


Date: Tue, 30 Mar 2004 21:49:12 -0700

It sounds like you are fighting with the token generation.

If you create a group AFTER the user has logged in... that group SID is not
on their token. You need to have the user log off and back on to get that
group SID listed on their token.

-- 
Derek Melber
BrainCore.Net
derekm@braincore.net
"sklett" <s@s.com> wrote in message
news:OobJMUrFEHA.2664@TK2MSFTNGP11.phx.gbl...
> Hi-
>
> I have a folder on the server that I want to allow certain people(a group
> eventually) to access.  When "Everyone" is in the share and directory
> permissions list, they can access it fine.  Let's use the user jCarter as
an
> example.  If I add jCarter to the permissions list with full control, then
> remove everyone... that user can still access the directory fine.  If I
> create a new group called "basic_office" and add jCarter to it, then add
the
> group to the directory permissions list and remove the jCarter user....
the
> user can't access the directory any longer.
>
> So the question is, why would a user be allowed to access a folder and not
> when the user is in a group?
>
> I don't get this at all.
>
> Please help.
>
> Thanks,
> Steve
>
>


Relevant Pages

  • Re: newbie: Everyone groups works, but not a user defined group
    ... > If I have a folder, remove all permissions, then add a group to it.... ... >> group SID listed on their token. ... >> Derek Melber ... If I add jCarter to the permissions list with full control, ...
    (microsoft.public.windows.server.security)
  • newbie: Everyone groups works, but not a user defined group
    ... I have a folder on the server that I want to allow certain people(a group ... If I add jCarter to the permissions list with full control, ... why would a user be allowed to access a folder and not ...
    (microsoft.public.windows.server.security)