adding user to group for additional file access takes forever

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

first forgive me if somebody thinks this is a cross post and they want to flame me.. to me, this is the best place for it

scenerio
a group exists that has all rights to a specific directory on a server. all existing members of the group can access the file resource perfectly. If I delete the group from the security section of the folder, instantly all members of the group have no access. If I add the security back to the folder for that group, instantly all members of the group have access.

situation
If I add a new user to that existing group, it takes 40+ minutes before that user can access that folder. If I add the user directly to the security of the folder then the changes are instant, it only happens at the group level... this is why I think this is an AD problem and not an ntfs problem

What logs or events should I look for that would explain this huge delay in rights changes relating to security groups. By the way, it doesnt matter if its a local security group or a global security group, still takes 40+ minutes. When we add distribution groups for users it takes maybe a minute max for it to kick in, why so long with security groups

Thanks in advance for any assistance.
 
you need to force replication between your DCs. AD Sites and services and
then NTDS settings for each server and replicate now and each connection.

--
HTH

Paul McGuire



Jeff said:
first forgive me if somebody thinks this is a cross post and they want to
flame me.. to me, this is the best place for it.
scenerio.
a group exists that has all rights to a specific directory on a server.
all existing members of the group can access the file resource perfectly.
If I delete the group from the security section of the folder, instantly all
members of the group have no access. If I add the security back to the
folder for that group, instantly all members of the group have access.
situation.
If I add a new user to that existing group, it takes 40+ minutes before
that user can access that folder. If I add the user directly to the
security of the folder then the changes are instant, it only happens at the
group level... this is why I think this is an AD problem and not an ntfs
problem.
What logs or events should I look for that would explain this huge delay
in rights changes relating to security groups. By the way, it doesnt matter
if its a local security group or a global security group, still takes 40+
minutes. When we add distribution groups for users it takes maybe a minute
max for it to kick in, why so long with security groups?
 
Back
Top