Guest CB Posted March 5, 2008 Posted March 5, 2008 If I add a user to a group (in computer management, local users and groups) it seems to have no effect until after a restart of the machine. Ditto for removing a user from a group. Is that expected? Do changes in group membership not apply to the user's permissions until after a restart? The question involves Windows 2003 Server.
Guest Richard Mueller [MVP] Posted March 5, 2008 Posted March 5, 2008 Re: Simple question about users and groups "CB" <CB@discussions.microsoft.com> wrote in message news:D44328F3-9C6F-4DAD-94C6-90D6AFADCE80@microsoft.com... > If I add a user to a group (in computer management, local users and > groups) > it seems to have no effect until after a restart of the machine. Ditto > for > removing a user from a group. > > Is that expected? Do changes in group membership not apply to the user's > permissions until after a restart? > > The question involves Windows 2003 Server. When a user (or computer) authenticates (logs on) they get a token identifying all the security groups they belong to. If this membership changes it will not take affect until they logoff and logon again to get a new token. A restart should not be necessary, but the user needs to logoff. -- Richard Mueller Microsoft MVP Scripting and ADSI Hilltop Lab - http://www.rlmueller.net --
Recommended Posts