Refresh Group Membership for users immediatly
Normally, when you change a user's group membership in A/D, the change is only reflected once: the user logs off and back on OR the user's token expires - this happens after 8 hours by default Follow this procedure to force a refresh: (source: E-how article ) start LDP connect to each of your DCs bind with an administrative account from the browse menu, select Modify in the Attribute window, paste this: updatecachedmemberships click add check the Extend checkbox click Run While I tested this today, I thing I got mixed results. can anyone confim this really works ?