Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I have a problem with AD authentication. When I add a user to an AD group the user gets instant access. However if I remove a user that user continues to have access till the following morning. I found the only way to immediately cut access is to do an iisreset but obviously this isn't a practical solution. Just wondering if this behaviour is normal. Incidentally I have tried reducing the token timeout. It makes no difference nor does getting the user to logout and log back in. I don't seem to remember having this problem in 2007. It's only happening in SP 2010.

share|improve this question
add comment

1 Answer 1

Try to do User Profile Synchronization and run Set-SPProfileServiceApplication cmdlet with

-PurgeNonImportedObjects $true 

to delete users that were deleted from AD.

share|improve this answer
    
That works for someone who leaves the organisation but in my case I am only removing access to a specific AD group. They still belong to other Groups. –  tonym Apr 30 '13 at 20:08
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.