Simple question about users and groups

[Guest CB]

If I add a user to a group (in computer management, local users and groups)

it seems to have no effect until after a restart of the machine. Ditto for

removing a user from a group.

 

Is that expected? Do changes in group membership not apply to the user's

permissions until after a restart?

 

The question involves Windows 2003 Server.

[Guest Richard Mueller [MVP]]

Re: Simple question about users and groups

 

 

"CB" <CB@discussions.microsoft.com> wrote in message

news:D44328F3-9C6F-4DAD-94C6-90D6AFADCE80@microsoft.com...

> If I add a user to a group (in computer management, local users and

> groups)

> it seems to have no effect until after a restart of the machine. Ditto

> for

> removing a user from a group.

>

> Is that expected? Do changes in group membership not apply to the user's

> permissions until after a restart?

>

> The question involves Windows 2003 Server.

 

When a user (or computer) authenticates (logs on) they get a token

identifying all the security groups they belong to. If this membership

changes it will not take affect until they logoff and logon again to get a

new token. A restart should not be necessary, but the user needs to logoff.

 

--

Richard Mueller

Microsoft MVP Scripting and ADSI

Hilltop Lab - http://www.rlmueller.net

--