NPM 10.1.2 SP1 AD Group Mystery

FormerMember

Riddle me this..... I have a user that is in an AD group called Orion-HelpDesk and no other Orion related group yet when he logs into Orion it thinks (and shows) that he is a member of the Orion-Users group. This is evident by the log in credentials shown on the top of the Orion page and restricted capabilites to that group account.

Now, when we started using the AD groups we did have all of the users at one time in the Orion-Users group and then split them out to other Orion based groups but that has been months ago.

I (and others) have verifed that the user only belongs to the Orion-HelpDesk group and not the other group.

Is it possible that Orion has 'retained' this information somewhere?

Oh, BTW, we are seeing this with more than one user.....

bshopp

Scott, I have not seen this or heard this from others.  When we log in via AD Groups we create a virtual user on the back end that get recycled/removed when session is completed and we re-check next time they login where that user should be places.

I think a ticket is warranted here to dig into further.