Membership FTP Allows Deleted User Account Access to the Site

ID: Q226491

The information in this article applies to:

Microsoft Commercial Internet System version 2.5

SYMPTOMS

After you delete a user account from the MCIS 2.5 Personal Web Page directory, that user can still log on for a short period of time (up to 200 consecutive seconds of inactivity) if they log on within 200 seconds of deleting the account.

When a user is logged on, the security credentials are cached for up to 200 seconds. If the account had not been logged on within 200 seconds of deleting the user account, the user is not able to log in.

CAUSE

This behavior is by design because of performance caching schemes.

Additional query words: FTP MCIS2.5 PWP

Keywords :
Version : winnt:2.5
Platform : winnt
Issue type : kbprb