Solved

Group Membership

Posted on 2011-03-16
14
933 Views
Last Modified: 2012-08-13
So here is a question. Anyone know how to push group membership to users without forcing a restart?  In other words, i have a new security group that i added and have added users to the group however those users still cannot access the folders that group has been given access to.  It seems restarting machines pushes those changes but is their an easier way via command line etc that anyone knows of to force those group changes?  Or is it that the change is supposed to be instant and something is potentially wrong with my AD?

Thanks
0
Comment
Question by:Noduzz
  • 5
  • 5
  • 3
  • +1
14 Comments
 
LVL 7

Expert Comment

by:waleeda
ID: 35151092
no need for restart, because it will check the permissions on the AD, i think you have made the permissions in wrong way. please review you permissions again
0
 
LVL 5

Author Comment

by:Noduzz
ID: 35151166
The permissions are fine.
0
 
LVL 5

Author Comment

by:Noduzz
ID: 35151185
If i add just the user to the folder it works fine,  its only when i have added the user to a group with the same permissions.
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 7

Expert Comment

by:waleeda
ID: 35151193
are you sure that you are adding the Group on both sharing permissions and Security Permissions
0
 
LVL 5

Author Comment

by:Noduzz
ID: 35151247
The share has the permission Everyone Full, so yes i am sure.
0
 
LVL 7

Expert Comment

by:waleeda
ID: 35151263
can you add yourself member on this group and try to access the folder and tell me what is the result message you are getting
0
 
LVL 11

Expert Comment

by:BillBondo
ID: 35151354
GP updates itself at a set random time. All your changes should be reflected after that. User and computer settings are in the GP editor under system/group policy folders.
0
 
LVL 3

Expert Comment

by:fireline1082
ID: 35151355

I was searching for this for very very long time and can not find any solution other than restart the machine

So I guess the anwer to your question. no way without restart.

In some cases, you may need to reboot twice as well. Like in my company we are using Mcafee EPO and I have created a security group to give USB and CD room access for the users. I noticed that the currently logged in user's group membership can only referesh after restarting twice. There is a built-in tool in Windows 7 to check the assigned group membership of the user; just from command prompt type: whoami /groups. For XP, you need to download it from microsoft site; just search for Whoami for XP

For testing, create any test group and then assign your self to that group; then run "whoami /groups"; you will see that the test group is not listed until you reboot your machine

I hope we can all find a solution for this !!!! It is a bit annoying thing
0
 
LVL 7

Expert Comment

by:waleeda
ID: 35151363
why gpupdate it's not a grou policy its group membership only :)
0
 
LVL 5

Author Comment

by:Noduzz
ID: 35151633
firline1082, Im glad im not crazy....  It seems though that logging off and logging on the machine may solve the issue as well at least based on the whoami results.  Kinda frustrating.. you would think this issue would have been resolved with windows 7...
0
 
LVL 5

Author Comment

by:Noduzz
ID: 35151653
I mean if you can do a gpupdate to update group policy you would think there would be a similar tool for group membership.
0
 
LVL 7

Expert Comment

by:waleeda
ID: 35154085
for the security permission on another computer or server no need also to log on and log off, but for change permission on the local machine it will require to log on and log off, for applying group policy, i till will require gpupdate /force plus log on and log off if there is a log script or somthing.
0
 
LVL 3

Expert Comment

by:fireline1082
ID: 35155571
Hi Noduzz,

Yes you are right about log off and login (may) solve this problem which it did; but I noticed in my case that I have to do it couple of times and it may not take the group membership quickly and found the restart faster. I am talking about the Mcafee EPO thing

Any how, hope to see some sort of tool that can force the PC to refersh the group membership of the logged-in user without requiring log off or restart (as your wish)

Thanks
0
 
LVL 3

Accepted Solution

by:
fireline1082 earned 500 total points
ID: 35155610
check this old post
http://www.experts-exchange.com/OS/Miscellaneous/Q_22026547.html

this is similar to your question; it is quite old - but was about the same/similar topic

thanks
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolve DNS query failed errors for Exchange
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question