Refresh computer account group membership

[A.J. Fried]

If you add a computer account to an active directory group, the
computer doesn't "know" of this new membership until you reboot. Does
anyone know of a way to refresh a computer's knowledge of it's own
group memberships WITHOUT rebooting?

I'm looking for something like secedit /refreshpolicy which forces a
computer to refresh it's group policies. Any ideas?

TIA

--> A.J. Fried

 

[Todd Maxey [MSFT]]

A.J.

The security token the is generated by the LSA is only generated at logon.
I know of no way to circumvent this process.

 

[Joe Richards [MVP]]

The computer must go through the logon process like a normal user would and that only occurs at reboot for a computer.