Re: Permissions Cache?

From: Jon Simmons (jon_nntp_at_jpsalaser.com)
Date: 08/27/03 

Date: Wed, 27 Aug 2003 12:32:58 -0400

This is exactly what I was looking for, the only problem is that I have seen
the new permissions take effect immediately and in some cases after a short
ammount of time. This led me to believe that the permissions were begin
cached locally and updated on a time interval. It seems strange (and quite
annoying to my users) that I cannot change permissions without them logging
off and back on again, it's also a security risk IMO.

Thanks for the info.

Jon

"geoff" <geoff@malachicomputer.com> wrote in message
news:0e0401c36cb2$9b539330$a601280a@phx.gbl...
> When you log on you're granted a "ticket granting
> ticket". In other words you're granted your permissions
> to different network resources (and permissions) when you
> log on. If you change permissions after a user is logged
> on, they won't feel the affects of that change until they
> log on again. Thus, that's why they can log onto another
> machine and have the updated permissions. You must force
> the user to log off. Then when they log back on the new
> permissions will be in affect. Hope that is what you're
> referring to. If not, let me know.
>
> Geoff
> >-----Original Message-----
> >
> >Windows XP Professional seems to be caching domain
> (Win2k) permissions
> >locally and updating them on an unknown interval. Can I
> force the update to
> >happen when I want it to?
> >
> >When I make permissions changes in the Win2k AD they
> often take a long time
> >to "take effect", though when that user logs onto a
> diffrent clinet machine
> >the permissions are correct. This disconnection makes
> me believe that the
> >persmissions are held locally. Is this true, if so what
> is the update
> >interval for this permissions cache and can I force the
> update manually?
> >
> >
> >Thanks
> >Jon
> >
> >
> >
> >
> >.
> >

Relevant Pages

  • Re: Delegating rights
    ... Exchange System Manager. ... filter down to the mailboxes and when you look at the Mailbox Rights ... permissions, you should see that they now have Change Permissions ACL ...
    (microsoft.public.exchange.admin)
  • Re: Shared folder security tab...Windows 2003 server
    ... If the user is not in the group shown as owner then they should not be able ... to change permissions because they are not owner assuming they do not have ... So lets say I just want to hide the security tab from the users. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: NTFS folder permissions - Creator Owner issue (I think)
    ... > granted the permission to change permissions or denied it, ... I said that the owner of an object can change the object's permission ... >>> or folder, and view permissions. ...
    (microsoft.public.security)
  • Re: Block user ability to change user/group permissions
    ... just assuming the folks could change permissions since it let me get into the ... user/group permissions as them, and even let me select or de-select stuff. ... is that the only thing I had to actually do was remove administrative rights ... "Joan Wild" wrote: ...
    (microsoft.public.access.security)
  • Re: NTFS folder permissions - Creator Owner issue (I think)
    ... You're saying that this group can change permissions even when not expressly ... >> Only the owner can, delete, rename or move a file or folder ... >> Creator Owner group to which I gave modify rights. ...
    (microsoft.public.security)
Loading