This forum is closed to new posts and
responses. Individual names altered for privacy purposes. The information contained in this website is provided for informational purposes only and should not be construed as a forum for customer support requests. Any customer support requests should be directed to the official HCL customer support channels below:
~Nita Prefreelyetsi 21.Aug.03 09:23 PM a Web browser Domino Server6.0.1 CF1Windows 2000
It has always been my understanding that the Deny Access group identified in the server document takes precedence over all other groups in the NAB. Simply meaning that by adding a user to the Deny Access group regardless of what other groups they exist in should keep them from accessing the server...well it doesn't. I have created three accounts and this is reproducible every time at least it is here. If someone could try this little task to prove or disprove my problem I would appreciate it.
Steps to reproduce:
1. Create a new Notes account (Mail file not necessary)
2. Place the user in a group that has access to the server.
3. Switch to this new ID to verify access to the server.
4. Switch back to your admin account or an account that can modify the deny access list.
5. Add the new user to the deny access list identified in the server doc.
6. Before leaving the NAB refresh the view indexes (Ctrl-Shift-F9)
7. Switch back to the ID you just added to the deny access list.
8. Open the NAB. (In theory you should not have access)
It's only after you remove the user from all groups but the deny access list that access to the server is removed from the user. Even if you go back and add the user to the same group they were in originally the user is still denied access. Once you remove the user from the deny access list they are able to access the server again but then add them to back to the deny access list and the whole problem starts again.