[BartSimpson]

So I have a stumper: I have an Active Directory Security Group - Global that has unfiltered Internet access rights. Everyone else's access is filtered.

The problem is that I have a few users who are getting the access and if you look at their profiles they are not members of the SGG. If you look at the SGG it does not show them as members. Yet when I run a query in Active Directory they come up as members.

Any ideas?

[Proculation]

BartSimpson wrote:

So I have a stumper: I have an Active Directory Security Group - Global that has unfiltered Internet access rights. Everyone else's access is filtered.

The problem is that I have a few users who are getting the access and if you look at their profiles they are not members of the SGG. If you look at the SGG it does not show them as members. Yet when I run a query in Active Directory they come up as members.

Any ideas?

Maybe they are in a sub-group that are in your SSG.

[PluggyRug]

Which version of Windows server?

I had a similar problem in server 2003. Only cure was to delete the suspicious user accounts, create new accounts for these users and assign them to their respective groups. This was after an upgrade from server 2000.

This can also happen after a migration from Novell Netware.

BTW, Microsoft's tech support was unable to provide a solution.

[BartSimpson]

PluggyRug wrote:

Which version of Windows server?

I had a similar problem in server 2003. Only cure was to delete the suspicious user accounts, create new accounts for these users and assign them to their respective groups. This was after an upgrade from server 2000.

This can also happen after a migration from Novell Netware.

BTW, Microsoft's tech support was unable to provide a solution.

Fuckin' A! Guess what we just did?

Thanks, Pluggy!