I have a Windows2003 ActiveDirectory (AD).
AD is *NOT* used as the workstation desktop login (instead Novell NDS is used).
AD is used for group membership. Groups are used by applications to determine application access.
If I disable a user in AD, does that *ONLY* disable login from a workstation (which is not used in my case) or does disabling also prevent other privileges.?
If my account is disabled do I still have domain privileges. Can I access a shared folder? Can I print to a printer?
If I DISABLE a user in AD, and the application tests the AD group for user account membership, will that test return true? Or will that test return false because even though the user is a member, their account is disabled?