When you disable a user account in netware, it immediately blocks access to any network resources. However, it seems in AD that's not the case. The ticket that was generated for the user on login is still valid for the entire ticket life duration. So while the user can't login any more ( and thus, can't get any more tickets generated ), they still retain access to network resources until their current ticket expires.
Is there any way around this? I'd like to mimic the behavior of netware here if I could. It's one of netware's redeeming features.
Is there any way around this? I'd like to mimic the behavior of netware here if I could. It's one of netware's redeeming features.