A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Security and Administration with Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Any way to refresh group membership while logged in?



 
 
Thread Tools Display Modes
  #1  
Old October 3rd 05, 07:41 PM
Byron
external usenet poster
 
Posts: n/a
Default Any way to refresh group membership while logged in?

I'm working on an application that uses the currently logged in users Windows
group membership. During development I want to be able to change their group
membership on the domain controller (Windows 2003 AD) and be able to see the
change in group membership in the application without having to log off and
back on. Aside from RUNAS, is there any way to do this?

I was hoping for something like GPUDATE that would affect group membership.
but I haven't seen anything that looks like it would work.
Ads
  #2  
Old October 4th 05, 01:10 AM
external usenet poster
 
Posts: n/a
Default



Byron wrote:

I'm working on an application that uses the currently logged in users Windows
group membership. During development I want to be able to change their group
membership on the domain controller (Windows 2003 AD) and be able to see the
change in group membership in the application without having to log off and
back on. Aside from RUNAS, is there any way to do this?

I was hoping for something like GPUDATE that would affect group membership.
but I haven't seen anything that looks like it would work.


I'm not saying there isn't anything out there to do that but it wouldn't surprise
me if there wasn't anything because Windows does a lot of things during login and
actually builds a token based on the groups an account is a member of. During
every object access that token is compared to the ACLs on the object to see if
the account has the appropriate permission. It may even be considered a
security violation if it was possible to change that on the fly unless the
application somehow tied into Kerberos and was able to reauthenticate to ADS
before the membership update took place.


 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
start program as logged in user from service jtencate Security and Administration with Windows XP 0 January 3rd 05 02:27 AM
Cannot compact this news group folder Richard Goh General XP issues or comments 1 November 19th 04 11:03 AM
XP background downloads from group policy for some, but not all us jurbanik Security and Administration with Windows XP 0 November 18th 04 11:42 AM
accidentally disabled all programs in group policy in XP and logged on as admini Rich Security and Administration with Windows XP 3 November 17th 04 08:15 PM
Mail Merge Problem MT DOJ Help Desk General XP issues or comments 9 July 20th 04 10:42 PM






All times are GMT +1. The time now is 03:36 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.