What is a user not member of any group?

What is a user not member of any group?

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
What is a user not member of any group? Yann 11-29-2006
Posted by =?Utf-8?B?WWFubg==?= on November 29, 2006, 2:03 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,

I've created a new local user on my Windows 2000 Server and I've removed its
membership to the Users group.
To which group(s) does this user still belong to? (is there a script to
determine it? like using a dsquery | dsget -memberof but for local users)

The issue I have is: if on a folder I assign the Read&Execute permissions
for the Users group, my new user (not member of this group) has access to it.
(???) I don't understand why...

Thanks for your answers
Yann P.

Posted by Roger Abell [MVP] on November 30, 2006, 8:47 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Look at the Member Of tab in the properties of the User
If there are no groups listed, then the account is not a member
of any true groups. The account however is tokenized with
various pseudogroup based on its usage. Two of these are
Authenticated Users and INTERACTIVE, which you will
often find as members of Users. Hence, even without any
direct memberships in true groups, an account can dynamically
be made member of groups, such as Users.

> Hello,
>
> I've created a new local user on my Windows 2000 Server and I've removed
> its
> membership to the Users group.
> To which group(s) does this user still belong to? (is there a script to
> determine it? like using a dsquery | dsget -memberof but for local users)
>
> The issue I have is: if on a folder I assign the Read&Execute permissions
> for the Users group, my new user (not member of this group) has access to
> it.
> (???) I don't understand why...
>
> Thanks for your answers
> Yann P.



Posted by =?Utf-8?B?WWFubg==?= on December 1, 2006, 1:00 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
The answer is really clear. And it explains why my user had access to a
folder even if it wasn't in the Users group.
Thanks


"Roger Abell [MVP]" wrote:

> Look at the Member Of tab in the properties of the User
> If there are no groups listed, then the account is not a member
> of any true groups. The account however is tokenized with
> various pseudogroup based on its usage. Two of these are
> Authenticated Users and INTERACTIVE, which you will
> often find as members of Users. Hence, even without any
> direct memberships in true groups, an account can dynamically
> be made member of groups, such as Users.
>
> > Hello,
> >
> > I've created a new local user on my Windows 2000 Server and I've removed
> > its
> > membership to the Users group.
> > To which group(s) does this user still belong to? (is there a script to
> > determine it? like using a dsquery | dsget -memberof but for local users)
> >
> > The issue I have is: if on a folder I assign the Read&Execute permissions
> > for the Users group, my new user (not member of this group) has access to
> > it.
> > (???) I don't understand why...
> >
> > Thanks for your answers
> > Yann P.
>
>
>

Similar ThreadsPosted
Member server User and Group management solutions March 15, 2007, 4:29 pm
Script to list member of Local Admin Group February 6, 2008, 1:22 pm
Re: Fast User Switching in Domain Member mode / Authentication Tic September 25, 2005, 11:28 pm
15401 - NT user or group not found July 15, 2008, 8:44 pm
IPSec to User Account Group Policy Suggestion August 25, 2005, 4:38 pm
Folder Security - Finding Group or User Name in Security settings January 30, 2006, 11:09 am
In windows domain,if 'domain user' group has been remove from the May 19, 2006, 4:07 am
Power Users group and Administrators group November 4, 2005, 4:04 pm
necesary to use IPSec between dc and member? September 4, 2005, 11:17 pm
Is there a MSN member services phish circulating? July 12, 2005, 7:43 am

The site map in XML format XML site map

Contact Us | Privacy Policy