Nested AD groups inside sharepoint groups

Question

In my SharePoint online environment i have AD groups nested inside a sharepoint group.

AD group: "10024@test"

Inside sharepoint group "members"

Some of the users inside my ad group cant access the startpage. And some of them have access. It seems illogical, what can the problem be?

Answer 1

If you wait a day, does it resolve? If so, it is related to the WindowsTokenLifetime. See this for more info: https://sharelockpoint.wordpress.com/tag/windowstokenlifetime/

Or, if the users were just added to the group, perhaps they need to log off and log in again?

Answer 2

In last month I have similar mistake and @mike2500 solution is a good solution for many people but not for me. and search in Google and results pages cant help us.

another parallel problem occur for us when we changed permission and try to test with different users-names and they report : not applying today. and applied after 10 hours and some other changes in user membership groups never applied but if you create new user and grant permission by adding to other groups this is applied only in first time

some users in OraganizationalUnit1 and other users and groups in Organizational unit 2 and when SharePoint can read OU1 and can't read OU2.

and this model occur if you have any other changes never applied.

and only one way that help us is

1. change the value of WindowsTokenLifetime by this link
2. try this:right click on OU and grant delegation (read users info) for service account that run application pools in IIS for your SharePoint.