Refresh computer account group membership

A

A.J. Fried

If you add a computer account to an active directory group, the
computer doesn't "know" of this new membership until you reboot. Does
anyone know of a way to refresh a computer's knowledge of it's own
group memberships WITHOUT rebooting?

I'm looking for something like secedit /refreshpolicy which forces a
computer to refresh it's group policies. Any ideas?

TIA

--> A.J. Fried
 
G

Gary Mudgett [MSFT]

A computer in AD is just like a user. Its token is created when the
computer logs in to the domain. There is no other way to refresh group
membership w/o rebooting for a computer account. Just like for a user a
logoff/logon is required.

--
Gary Mudgett, MCSE, MCSA
Windows 2000/2003 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Refresh computer account group membership 2
Manual Update Group Policy on Windows 2000 Server 3
Computer Group Membership 1
Computer Accounts Group Membership 5
Computer GPO using Security Filtering 7
enumerate computer group membership without rebooting 1
Active Directory Group Membership 0
Security templates applied locally vs applied through group policy 1

Top