|
|
InGroup Problems
|
|
I have a user that clearly shows being in a particular group, but InGroup does not recognize it. It recognizes all of the groups he is in but one. I've flushed the cache using Kix32 /F and verified the TokenCache registry collection was cleared. I run NET USER username /Domain and it shows he's in the group. Still does not recognize it. This is on a XP client on a W2003-AD domain. Using Kix 4.22. Doesn't matter if I run it from the Netlogon share or copy locally (along with Kix32.exe) and run locally. What else should I check or do to resolve this?
|
|
|
|
Re: InGroup Problems
|
|
what type of group is this? Has the user logged/logon again since being added to the group and after the group has replicated?
|
|
|
|
Re: InGroup Problems
|
|
It's a global group that has been around for many months. The user has been in the group for about 8 hours. He shows up in the TokenCache as well as via NET USER, so Kix is pulling that correctly but If InGroup(group) returns 0.
|
|
|
|
Re: InGroup Problems
|
|
VERY WEIRD! Even though NET USER showed he was in the group. AND the TokenCache showed the group in the list of registry keys, it was returning 0 from InGroup(). Found out he had ZoneAlarm Integrity Client running. We disabled the firewall and ran it again and it worked (e.g. InGroup() returns 1). Weird. Even though the TokenCache shows being in the group, I guess Kix still attempts to do something that ZA blocked in some way?
|
NTDOC
|
|
(KiX Master)
|
|
2004-09-16 12:39 AM
|
|
|
|
|
|
|
|
Re: InGroup Problems
|
|
Wow, that sucks... the AT&T VPN Dialer is now using ZoneAlarm, guess I'll have to start looking out for similar issues.
|
|
|
|
Re: InGroup Problems
|
|
This is indeed very concerning. Can you please perform more testing and post the results. I do not understand why one group would report correctly and another no at all with ZA running. Can you please post a detail verification test so we can try to reproduce the issue?
|
|
|
Re: InGroup Problems
|
|
Yes.
InGroup() in XP prof. & Server 2003 doesn't work well!
|
|
|
|
Re: InGroup Problems
|
|
Can you please usbstantiate? INGROUP() works.
|
