From LedHed's Wiki
Revision as of 19:48, 10 May 2017 by Ledhed (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Overview

Active Directory computer objects only update their group membership upon reboot (much like user objects update their membership at logon). Sometimes you need a computer to update its membership but can't reboot because the computer is serving some critical function.

KLIST

You can use c:\windows\system32\klist.exe and gpupdate.exe to force a refresh. klist.exe needs to be run with Domain Admin or higher privilege. It may even need to be run as the NT Authority\System account.

klist.exe /purge
gpupdate /force


Reference

https://technet.microsoft.com/en-us/library/hh134826(v=ws.11).aspx

https://blogs.msdn.microsoft.com/jamoyer/2008/01/30/update-computer-account-group-membership-without-rebooting/