Refresh account group memberships without relogging in

[Dave Slinn]

Is there anyway, with either an API call or system shell command or
something like that, that can refresh a user's account token with any
updated group memberships?

Currently, if I add someone to a security group in Active Directory, this
change isn't "seen" by the user until they log out and log back in. Is
there anyway to force this update without logging out and back in again?

- D

 

[Paul Bergson]

No. I have heard of no way other than to re-authenticate.

 

[Paul Bergson]

Answered in other news group. Please don't double post.

 

[Dave Slinn]

I'm sorry - I believed that if both newsgroups were addressed at the same
time, this did not constitute a double-post, since a reply to one appears
under both.

I was under the impression that a "double-post" was sending two (or more)
copies of the same question in separate postings to different groups.

 

[Jimmy Andersson [MVP]]

Two tools from the Resource Kit can do it:

UI - KerbTray, you can purge the ticket. Note that the next time you access
a resource the system requires reauthentication. But that's no problem since
it doesn't require user intervention.

Comman Prompt - Klist, you can purge tickets with this tool. But it will
require you to logoff/logon in order to get a new ticket.

Regards,
/Jimmy

 

[Joe Richards [MVP]]

Hey Jimmy, that will refresh the kerb svc tickets, it won't impact the local
security token.

joe

 

[Jimmy Andersson [MVP]]

Hey, true.

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Directory Services
---------- www.qadvice.com ----------