Changes to user accounts not immediately applied

[Guest]

Archived from groups: microsoft.public.win2000.setup_deployment (More info?)

I have a w2k server with sp4 set-up as an intranet web server running several
sites.

One site is restricted so only members of a certain groups can access it.
Which groups can access the site is controlled by the NTFS permissions of
that directory.

If I modify a user account so the user is no longer a member of a group with
access, for a while the user can still log-in to the site. Its as if the
changes are not applied immediately to the account

Here is an example:
4.46 pm User 'Bob' given access to site by adding him to the group
'Supervisor'. Bob cannot access the site.
4.49 pm Bob can now access the site
5 pm Bob is removed from the group 'Supervisor'. Bob can still access the
site until...
5.24 pm Bob tries to access the site and now finds he can't
5.30 pm Bob is removed from the group 'Supervisor' but can access the site
so he goes home
8.38 am Bob gets into work, tries to access the site and can't



I'm having a similar problem changing passwords. I haven't spent as long
looking at this but it appears changes to passwords are not immediately
applied either.

There are quite a few accounts, approximately 120 users and 45 groups.

We don't use active directory. The server is part of the workgroup.

Have I overlooked something obvious here or maybe inadvertently changed a
setting so that accounts are updated after a period of time?
Thanks.

 

[Guest]

Archived from groups: microsoft.public.win2000.setup_deployment (More info?)

Swaffs wrote:

> We don't use active directory. The server is part of the workgroup.

??

I don't get it.

--
Gerry Hickman (London UK)

 

[Guest]

Archived from groups: microsoft.public.win2000.setup_deployment (More info?)

I'm just trying to give as much info about the environment as possible. The
server is part of a Workgroup rather than a Domain, so you can rule out out
any problems that may occur with replication between domain controllers.


"Gerry Hickman" wrote:

> Swaffs wrote:
>
> > We don't use active directory. The server is part of the workgroup.
>
> ??
>
> I don't get it.
>
> --
> Gerry Hickman (London UK)
>

 

[Guest]

Archived from groups: microsoft.public.win2000.setup_deployment (More info?)

Hi Swaffs wrote:

> I'm just trying to give as much info about the environment as possible. The
> server is part of a Workgroup rather than a Domain, so you can rule out out
> any problems that may occur with replication between domain controllers.

OK, but how on earth do you manage network-wide user accounts without a
domain controller? I don't get it. How does each client box know where
to look for these sudden "user account" changes? I don't understand.

--
Gerry Hickman (London UK)