Windows 2000 group policy

[george34]

Hi

I have this one problem when i add domain user to so many
groups and when they try to log in the it hangs at loading
personal settings. when i remove them form any one of the
group it will boot up.Is there a limit to how many groups
one user can have.I was wondering if anyone else had any
problem like this.

Thank You

 

[Jerold Schulman]

Hi

I have this one problem when i add domain user to so many
groups and when they try to log in the it hangs at loading
personal settings. when i remove them form any one of the
group it will boot up.Is there a limit to how many groups
one user can have.I was wondering if anyone else had any
problem like this.

Thank You

Try applying SP4 to the domain controllers.


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[Sean Siler]

Yes, there is a limit, but you probably aren't there. A user can belong to
1023 groups, because there are only 1024 entries available in the logon
token for SIDs (the last one is reserved for the SID of the user)

I would guess that the group that is holding up the login is being applied
(via filtering) to that group. You will probably want to verify the
settings inside of the GPO. If it is really too slow, you can enable
synchronous processing, so the user gets to login BEFORE the GPO is applied,
but this is not usually a good idea.

HTH.

Sean Siler