Refresh account group memberships without relogging in

  • Thread starter Thread starter Dave Slinn
  • Start date Start date
D

Dave Slinn

Is there anyway, with either an API call or system shell command or
something like that, that can refresh a user's account token with any
updated group memberships?

Currently, if I add someone to a security group in Active Directory, this
change isn't "seen" by the user until they log out and log back in. Is
there anyway to force this update without logging out and back in again?

- D
 
I'm sorry - I believed that if both newsgroups were addressed at the same
time, this did not constitute a double-post, since a reply to one appears
under both.

I was under the impression that a "double-post" was sending two (or more)
copies of the same question in separate postings to different groups.
 
Two tools from the Resource Kit can do it:

UI - KerbTray, you can purge the ticket. Note that the next time you access
a resource the system requires reauthentication. But that's no problem since
it doesn't require user intervention.

Comman Prompt - Klist, you can purge tickets with this tool. But it will
require you to logoff/logon in order to get a new ticket.

Regards,
/Jimmy
 
Hey Jimmy, that will refresh the kerb svc tickets, it won't impact the local
security token.

joe
 
Back
Top