How to refresh current user privilege without relogin

[PanYB]

Hi,
I grant current win2k user a different group, normally, I've to
logoff and login again to make new group work for the current user.
Is there any command or tools that let me without relogin and refresh
current user privilige in current win2k session?

thanks

 

[Roger Abell]

The user token is built as a part of the login processing.
There is as far as I know no alternative but building a new
token via a login.

 

[Glenn L]

Yes.
Assuming you are running AD, you can use Klist or Kerbtray on the
workstation, to purge the users kerbereos tickets. It will rebuild the
token when you next access a network resource. Not all apps are friendly to
manually purging kerb tickets.

Your best bet is to follow the logoff and back on procedure.

 

[Marco Peretti]

Glenn

but that would not clear the local token right? AFAIK the token will only be
rebuilt on remote computers.

 

[Marco Peretti]

Hi

why would you want to do something like that to begin with? Can you explain
us what you are trying to acheive by adding a group on the fly?