From LedHed's Wiki
(Created page with "== Overview == Active Directory computer objects only update their group membership upon reboot (much like user objects update their membership at logon). Sometimes you need a...") |
|||
| Line 5: | Line 5: | ||
You can use c:\windows\system32\klist.exe and gpupdate.exe to force a refresh. klist.exe needs to be run with Domain Admin or higher privilege. It may even need to be run as the NT Authority\System account. | You can use c:\windows\system32\klist.exe and gpupdate.exe to force a refresh. klist.exe needs to be run with Domain Admin or higher privilege. It may even need to be run as the NT Authority\System account. | ||
| − | klist.exe | + | klist.exe purge |
gpupdate /force | gpupdate /force | ||
Latest revision as of 17:01, 8 June 2017
Overview
Active Directory computer objects only update their group membership upon reboot (much like user objects update their membership at logon). Sometimes you need a computer to update its membership but can't reboot because the computer is serving some critical function.
KLIST
You can use c:\windows\system32\klist.exe and gpupdate.exe to force a refresh. klist.exe needs to be run with Domain Admin or higher privilege. It may even need to be run as the NT Authority\System account.
klist.exe purge gpupdate /force
Reference
https://technet.microsoft.com/en-us/library/hh134826(v=ws.11).aspx