Membership FTP Allows Deleted User Account Access to the Site (226491)



The information in this article applies to:

  • Microsoft Commercial Internet System 2.5

This article was previously published under Q226491

SYMPTOMS

After you delete a user account from the MCIS 2.5 Personal Web Page directory, that user can still log on for a short period of time (up to 200 consecutive seconds of inactivity) if they log on within 200 seconds of deleting the account.

When a user is logged on, the security credentials are cached for up to 200 seconds. If the account had not been logged on within 200 seconds of deleting the user account, the user is not able to log in.

CAUSE

This behavior is by design because of performance caching schemes.

Modification Type:MajorLast Reviewed:9/30/2003
Keywords:kbpending kbprb KB226491