11

So, when user logs in to their workstation, they receive SIDs of groups they are members of, and this is used for the length of the session, until logging off.

Is there a way to refresh membership SIDs information without actually having to log off and log on again? I've added myself to a group, but can't log off without interrupting running process that requires these permissions. Don't want to have to go through these steps again...

Improve this question

5 Answers 5

Reset to default
5

No supported way that I know of. You MAY be able to use RUNAS to start a command prompt with a new session and specify your same account name again... and that may do it... but I'd be running most (if not all) things that need special permissions as services and/or under service accounts.

Improve this answer
5
  • Open Task Manager
  • Kill all instances of explorer.exe
  • Go to File → "New Task (Run...)"
  • Type in cmd
  • In the command prompt type RunAs /user:<domain>\<user> explorer.exe

Done.

Improve this answer
3
  • This does not work on my case as I didn't want to interrupt already running process that needed it to begin with.
    – Sergey
    Jan 18, 2013 at 18:24
  • This works amazingly well. After doing it, you may need to run your logon script again to map your drives.
    – Glen Little
    Jun 30, 2014 at 23:24
  • 1
    You can also run whoami /groups to see if your session knows about the new group membership.
    – Glen Little
    Jun 30, 2014 at 23:26
3

Is Gpupdate something that would work for you?

http://technet.microsoft.com/en-us/library/bb490983.aspx

Refreshes local and Active Directory-based Group Policy settings, including security settings.

gpupdate [/target:{computer|user}] [/force] [/wait:value] [/logoff] [/boot]
Improve this answer
1

I was able to get a new group to show up in whoami /groups using a combination of:

  1. Run net use * /delete to disconnect all active network shares
  2. Run net use \\company.domain.com to reconnect to active directory domain
  3. Lock workstation via start menu
  4. Login and run whoami again to verify new group is added

Not sure what step actually cause it to work, but I was able to access a new network share by completing the above steps.

Improve this answer
0

On my domain only works this for a network drive:

@echo off
net use M: /d /y
gpupdate /force
net use M: \\10.11.12.233\Archivos /persistent:Yes
explorer.exe M:
Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .