|
getgroups returns:
DOMAIN\user is a member of three groups.
Domain Users
glbl_grp_corp_acctpay
dmlcl_grp_defprn_prn0025
The problem is that the printers use DOMAIN LOCAL groups to determine their permissions such as "dmlcl_grp_corp_acctpay_bw_printers" or "dmlcl_grp_corp_acct_clr_printers." These groups are "Member Of" glbl_grp_corp_acctpay. If we just take the DOMAIN LOCAL groups out, we have to assign the DOMAIN LOCAL groups to each user. That would suck and just isn't possible. Any suggestions?
| 
