gpresult /r and security groups?

C

cyclone3d

[H]F Junkie
Joined
Aug 16, 2004
Messages
16,301
Is is normal for the same security groups to be listed 2 or more times under

"The user is a part of the following security groups"

when I run a gpresult /r

If this isn't normal behaviour, what do I need to do to fix it?
 
cyclone3d said:
Is is normal for the same security groups to be listed 2 or more times
Click to expand...

I've seen something similar in AD when a replication is in progress. Had the user's group memberships been very recently updated?
 
Not for the groups listed. It was actually my regular user account that I was looking at.

I am not even in one of the groups it listed.. and never have been.

edit: looks like it is all user accounts that this is showing up on.
 
Last edited:
You know, I'm not sure about this. But what I do know is that it is possible to be in the same group more than once. Remember, groups can be members of other groups. I wonder if you're seeing something related to that.
 
I thought of that.. and made sure that that shouldn't be happening.

There were a few groups that for some reason had all the user accounts entered manually instead of just being a member of the all users groups which already has everybody in it.

I fixed that, but it didn't make any difference.

The one group that I have never been a member of that is being listed is not a member of another group, nor does it have any groups that I am in as members.
 
cyclone3d said:
I thought of that.. and made sure that that shouldn't be happening.

There were a few groups that for some reason had all the user accounts entered manually instead of just being a member of the all users groups which already has everybody in it.

I fixed that, but it didn't make any difference.
Click to expand...
Did you log out and log back in afterwards?

Remember; Security memberships are static for the duration of the login.
 
Yep.
Logged out and then back in and checked - same thing.
Ran a gpudate /force, let the system reboot, logged back in, and it is still happening.
 
Is it possible that you have a local group with the same name as a domain group?

Hmmm.... you are on a domain, aren't you?

Anything of interest in Event Viewer?
 
We only use domain groups, no local groups at all.

This happens no matter what computer I am on.

Don't see anything out of the ordinary in Event Viewer.

I had one of our infrastructure guys look at it and he didn't know why it was doing that so he sent it over to another guy to look at.

It isn't just on my account either, it looks like it is probably happening to everybody.
 
Wow... Necro.

I don't think we ever figured out why it was doing it.

The problem eventually just cleared up on its own.
 
You must log in or register to reply here.
Back
Top