RE: RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-09 Thread Lee, Wook
Subject: RE: RE: [ActiveDir] SID Deleted users remains in NTS permission. Because as mentioned in my post, this is a very difficult and complex task given the current security infrastructure. There is nothing maintaining backlinks into where specific SIDs are used for ACLing. Even so, as Wook

RE: RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-08 Thread Lee Flight
Subject: RE: RE: [ActiveDir] SID Deleted users remains in NTS permission. But still the actual discussion is pending. If someone is having a single folder which is mapped to a single user. So in that case how we can use groups suppose tomorrow this user left the organization his account got deleted

RE: RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-08 Thread joe
Edition - http://www.joeware.net/win/ad3e.htm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lee Flight Sent: Monday, January 08, 2007 8:35 AM To: ActiveDir@mail.activedir.org Subject: RE: RE: [ActiveDir] SID Deleted users remains in NTS permission. One

RE: RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-07 Thread joe
10:18 AM To: ActiveDir@mail.activedir.org Subject: RE: RE: [ActiveDir] SID Deleted users remains in NTS permission. But still the actual discussion is pending. If someone is having a single folder which is mapped to a single user. So in that case how we can use groups suppose tomorrow this user

[ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread Yann
Hello all Happy new year ! :) AD 2k3 sp1 in FFL mode. When i delete a user or group from AD, and these objects have permissions on ntfs permissions, i usually see their sids remaining in those file directory ACLs. Is this normal ? If not,what could be the reason(s) how to

RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread Akomolafe, Deji
Yesterday? -anon From: Yann Sent: Thu 1/4/2007 1:52 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] SID Deleted users remains in NTS permission. Hello all Happy new year ! :) AD 2k3 sp1 in FFL mode. When i delete a user or group from AD, and these objects have permissions on ntfs

RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread Almeida Pinto, Jorge de
is the Tomorrow you were worried about Yesterday? -anon From: Yann Sent: Thu 1/4/2007 1:52 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] SID Deleted users remains in NTS permission. Hello all Happy new year ! :) AD 2k3 sp1 in FFL mode. When i delete

RE : RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread Yann
www.akomolafe.com - we know IT -5.75, -3.23 Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon - From: Yann Sent: Thu 1/4/2007 1:52 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] SID Deleted users remains in NTS permission

Re: RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread Paul Williams
doing most of the leg work. Clients always use servers. Servers don't use clients. --Paul - Original Message - From: Yann To: ActiveDir@mail.activedir.org Sent: Thursday, January 04, 2007 10:35 AM Subject: RE : RE: [ActiveDir] SID Deleted users remains in NTS permission

RE: RE : RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread Robert Bobel
@mail.activedir.org Subject: RE : RE: [ActiveDir] SID Deleted users remains in NTS permission. Thanks for replying. You say that it is normal that the sid still remains in file directory ACLs after the deletion of the corresponding group ?? I always thought that sids *HAVE TO* disapear dynamically on all

RE : RE: RE : RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread Yann
PROTECTED] on behalf of Yann Sent: Thu 1/4/2007 5:35 AM To: ActiveDir@mail.activedir.org Subject: RE : RE: [ActiveDir] SID Deleted users remains in NTS permission. Thanks for replying. You say that it is normal that the sid still remains in file directory ACLs after the deletion

RE: RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread joe
, 2007 5:35 AM To: ActiveDir@mail.activedir.org Subject: RE : RE: [ActiveDir] SID Deleted users remains in NTS permission. Thanks for replying. You say that it is normal that the sid still remains in file directory ACLs after the deletion of the corresponding group ?? I always thought that sids

RE: RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread Haritwal, Dhiraj
Subject: RE: RE: [ActiveDir] SID Deleted users remains in NTS permission. Not sure why this suprises you. The ACLs are not maintained by AD nor the SAM where the user accounts exist which means you either get to poll or put some form of notification system in process. Consider also the case

Re: RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread Paul Williams
, Dhiraj To: ActiveDir@mail.activedir.org Sent: Thursday, January 04, 2007 3:18 PM Subject: RE: RE: [ActiveDir] SID Deleted users remains in NTS permission. But still the actual discussion is pending. If someone is having a single folder which is mapped to a single user. So in that case how

RE : RE: RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread Yann
Sent: Thursday, January 04, 2007 5:35 AM To: ActiveDir@mail.activedir.org Subject: RE : RE: [ActiveDir] SID Deleted users remains in NTS permission. Thanks for replying. You say that it is normal that the sid still remains in file directory ACLs after the deletion of the corresponding

Re: RE: RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread Paul Williams
Subject: RE : RE: RE: [ActiveDir] SID Deleted users remains in NTS permission. Hi, After rereading posts, it now makes sense to me that the ACEs are managed by the local LSA, and not by AD LSA So now if i consider that a group or user is deleted from AD and that object is set on an AD

RE : Re: RE: RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread Yann
- Original Message - From: Yann To: ActiveDir@mail.activedir.org Sent: Thursday, January 04, 2007 3:54 PM Subject: RE : RE: RE: [ActiveDir] SID Deleted users remains in NTS permission. Hi, After rereading posts, it now makes sense to me that the ACEs

RE: RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread Lee, Wook
references to it. Wook From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Williams Sent: Thursday, January 04, 2007 7:29 AM To: ActiveDir@mail.activedir.org Subject: Re: RE: [ActiveDir] SID Deleted users remains in NTS permission. Because it's not managed by the DS. The SID

RE: RE: [ActiveDir] SID Deleted users remains in NTS permission.

2007-01-04 Thread Akomolafe, Deji
Yesterday? -anon From: Lee, Wook Sent: Thu 1/4/2007 10:39 AM To: ActiveDir@mail.activedir.org Subject: RE: RE: [ActiveDir] SID Deleted users remains in NTS permission. I should point out that you can get dangling SIDs even when the relevant user or group is still in the AD. The scenario involves