|
Kent,
thanks for pointer, I found the work round for the problem in the latest copy of the documentation which mentions the group cache and flushing it.
I know virtually nothing about AD APIs, my normal territory is eDirectory, but looking up the APIs you list it looks like the key one is GetTokenInfomation which I guess is being called with TOKEN_GROUPS. As mentioned in my subsequent post it looks like Kixtart only gets the actual text group name for a SID when it detects a new of SID, thus when a group is renamed in AD as the SID doesn't change a script will fail until the cache is flushed giving the impression AD has "sticky" names.
Since I am guessing that this is by design to minimise network traffic. I have pulled my post that suggested it was a flaw.
Just very confusing when the manual you are working from doesn't mention the feature and possible side effects, when you are having AD making life interesting at the same time.
thanks,
RichardM
[ 12. June 2003, 17:05: Message edited by: RicardM ]
| 
