Folder Secutity

[speaktek]

Regarding folder Security:
I setup Global Security Group: Accounting
I assigned user to this Group (Karen)
I assigned this Group to the Accounting Folder.

Karen cannot access folder…?
If I assign Karen to the folder directly, she had access…?

Any thoughts? I’d prefer to manage with Groups…

 

[speaktek]

Hmmmm....I went back to check settings again, and the 'Group' associated to the folder was replaced with '?' (Some numeric info/address or something).

I removed this bogus entry, and reselcted the Group, and now it works...?

 

[Teknoratti]

That bogus number you saw was probably the SID (security Identifier that every object in Active Directory receives)

 

[speaktek]

Any idea what happened there? Originally when I set it up, it was fine...?

Thanks for the reply!

 

[YoungKai]

I'm guessing that you:
1) setup Global Security Group: Accounting
2) assigned this Group to the Accounting Folder
3) deleted Accounting security group
4) re-created Accounting security group
5) assigned user to this Group (Karen)

The group you initially given permission to the Accounting folder will not be the same as the one you re-created, even though you have given them the same name.
Windows actually identifies the group by its SID (the "?" that you saw), and when you re-create the group, the new group created will have a different SID.
While the initial group was deleted, it's no longer been recongized as "Accounting", therefore you see its SID listed instead of "Accounting".

 

[speaktek]

Outstanding! As a matter of fact...the initial implementation did not work, so I did delete/re-create it. It finally worked upon another delete/create.

Thanks Again!

 

[PScottC]

One additional comment here. To make this work, the user has to log off and log back in after getting assigned to a group. During the logon process the "security token" that is given to the user by the DC contains group membership. That token is not refreshed until the next logon. If you have multiple DC's you must wait until DC that is local to the user has replicated with the DC where the group membership was changed before logging the user off and on.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[speaktek]

Gottcha...thanks!