User Groups not working

[id10t]

I hope someone has seen this before and can help me. It happens to just some users, I will put them in a group to give them access to directories, a proxy server, ect... But it still acts like they are not in the group. I have tried to take them out and put it back in, but still no good. So it will come down to making them a new user name then it works like a gem. The system I am in is a single master domain, with NT 4.0 workstations and servers, and all have SP5.

Thanks in advance

 

[SteelDragon]

Are the users in question members of multiple groups? You may want to check that. If they are one of the other groups may have a NO ACCESS permission set-up, and therefore they get NO rights.

Good Luck
SteelDragon

 

[kjonnnnn]

When you put them in a group, did you give the group access to the directories. Remember AGLP. Accounts / Global Groups / Local Groups / Permissions. People go in global groups, and global groups go in local groups.

 

[id10t]

SteelDragon,

Thanks for the response but that is not the problem, cause when I make a new user name and put that new name in all the same groups it will work fine. It is almost like the old user name gets locked up, is the best way to describe it.

 

[SteelDragon]

The only other thing I can tell you to check is when you have one of those user names, check the resource you are trying to access, see if it has specific permissions for a group or that person, if not look under server manager and check to see if the user has a file lock or if the resource is maxed out or some other problem may exist. It is a permissions related problem and there is another way to fix it other that recreating the user. Recreating the user is only circumventing the problem... the reason the new user is able to access the resource even with the SAME id is that each time a user is created NT sets an ID for that user name that is unique, and that is how they are tracked, not by the text you see, but by that unique ID. So in a sence you still have ID's out there that are "locked". I would do some really good file permissions NTFS and Share permissions detective work on your domain... I'm certain this will reveal your problem.

Good Luck, and Happy Hunting
SteelDragon