View source for Force Domain Computer to Refresh its Group Membership

== Overview ==
Active Directory computer objects only update their group membership upon reboot (much like user objects update their membership at logon). Sometimes you need a computer to update its membership but can't reboot because the computer is serving some critical function.

== KLIST ==
You can use c:\windows\system32\klist.exe and gpupdate.exe to force a refresh. klist.exe needs to be run with Domain Admin or higher privilege. It may even need to be run as the NT Authority\System account.

 klist.exe purge
 gpupdate /force


== Reference == 
https://technet.microsoft.com/en-us/library/hh134826(v=ws.11).aspx

https://blogs.msdn.microsoft.com/jamoyer/2008/01/30/update-computer-account-group-membership-without-rebooting/



[[Category:Windows]]