IS_MEMBER with Active Directory slow to refresh

[MeanGreen]

We are currently testing using the IS_MEMBER function in conjunction with some active directory domain local security groups to help filter data that users can see.

The issue is with the IS_MEMBER function.

It doesn't seem to refresh who is and is not in a group in any deterministic time frame. For example: I place myself in the AD group and the IS_MEMBER still returns 0, after a day or so it will finally return 1, if I take myself out of the group the same type of delay occurs.

We have two domain controllers in the AD and I have replicated the AD info to both with no effect.
The machine I am testing on is running SQL Server
2000 with SP4.

Does any know how to get IS_MEMBER to refresh member lists in real time when using with AD?

 

[mrdenny]

It will all depend on which domain controller the SQL Server talks to and which domain controller the change was made on, as well as your domain replication schedule.

Denny
MCSA (2003) / MCDBA (SQL 2000)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

Donate to Katrina relief