Effective permissions

From: Chad S. (chad_at_nowhere.com)
Date: 07/28/04


Date: Wed, 28 Jul 2004 07:27:06 -0700

Scenario:

I am a member of the domain Deputy and domain Users groups. Deputy is in the Administrators group on all machines in the domain. When I run scripts or batch files that connect to all machines in the domain, a few machines will block access to my account. If I remove my account from Users and run the script again, I am granted access to the machines on which I was previously blocked.

Question:

By what mechanism are my rights truncated to those of the Users group on a small subset of machines?