Permissions Cache?

From: geoff (geoff_at_malachicomputer.com)
Date: 08/27/03


Date: Wed, 27 Aug 2003 08:48:06 -0700


When you log on you're granted a "ticket granting
ticket". In other words you're granted your permissions
to different network resources (and permissions) when you
log on. If you change permissions after a user is logged
on, they won't feel the affects of that change until they
log on again. Thus, that's why they can log onto another
machine and have the updated permissions. You must force
the user to log off. Then when they log back on the new
permissions will be in affect. Hope that is what you're
referring to. If not, let me know.

Geoff
>-----Original Message-----
>
>Windows XP Professional seems to be caching domain
(Win2k) permissions
>locally and updating them on an unknown interval. Can I
force the update to
>happen when I want it to?
>
>When I make permissions changes in the Win2k AD they
often take a long time
>to "take effect", though when that user logs onto a
diffrent clinet machine
>the permissions are correct. This disconnection makes
me believe that the
>persmissions are held locally. Is this true, if so what
is the update
>interval for this permissions cache and can I force the
update manually?
>
>
>Thanks
>Jon
>
>
>
>
>.
>



Relevant Pages

  • Re: Permissions Cache?
    ... This led me to believe that the permissions were begin ... annoying to my users) that I cannot change permissions without them logging ... > When you log on you're granted a "ticket granting ...
    (microsoft.public.windowsxp.security_admin)
  • win98 vs. win2k problem
    ... I'm having what I think is a Win98 vs. Win2K problem. ... Permissions set to "everyone". ... I also run a little app on about 5 Win98 ...
    (microsoft.public.win2000.general)
  • Re: SBS 2003 Managing Computers
    ... logged in as Administrator. ... > as you may have a good reason to keep the Win2k pro machine standalone. ... > If you cannot join the Win2k box to the domain you can add permissions to ... >> not have permission to use this network resource. ...
    (microsoft.public.windows.server.sbs)
  • Re: Shared Folder on Windows 2000 is ReadOnly from XP Home
    ... Instead on the Win2k ... machine create a new user account with exactly the same user name and ... >> and NTFS permissions. ... > net user guest /active:yes ...
    (microsoft.public.windowsxp.network_web)
  • Re: problems with lost permissions
    ... >I have a rather peculiar problem with lost permissions on a Win2K ... >apparently removed the copy of ntldr that was there. ... Stick the drive into another computer and change the permissions back. ...
    (comp.os.ms-windows.nt.admin.security)