Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

So, when user logs in to their workstation, they receive SIDs of groups they are members of, and this is used for the length of the session, until logging off.

Is there a way to refresh membership SIDs information without actually having to log off and log on again? I've added myself to a group, but can't log off without interrupting running process that requires these permissions. Don't want to have to go through these steps again...

share|improve this question
up vote 4 down vote accepted

No supported way that I know of. You MAY be able to use RUNAS to start a command prompt with a new session and specify your same account name again... and that may do it... but I'd be running most (if not all) things that need special permissions as services and/or under service accounts.

share|improve this answer
  • Open Task Manager
  • Kill all instances of explorer.exe
  • Go to File → "New Task (Run...)"
  • Type in cmd
  • In the command prompt type RunAs /user:<domain>\<user> explorer.exe


share|improve this answer
This does not work on my case as I didn't want to interrupt already running process that needed it to begin with. – Sergey Jan 18 '13 at 18:24
This works amazingly well. After doing it, you may need to run your logon script again to map your drives. – Glen Little Jun 30 '14 at 23:24
You can also run whoami /groups to see if your session knows about the new group membership. – Glen Little Jun 30 '14 at 23:26

Is Gpupdate something that would work for you?

Refreshes local and Active Directory-based Group Policy settings, including security settings.

gpupdate [/target:{computer|user}] [/force] [/wait:value] [/logoff] [/boot]
share|improve this answer

I was able to get a new group to show up in whoami /groups using a combination of:

  1. Run net use * /delete to disconnect all active network shares
  2. Run net use \\ to reconnect to active directory domain
  3. Lock workstation via start menu
  4. Login and run whoami again to verify new group is added

Not sure what step actually cause it to work, but I was able to access a new network share by completing the above steps.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .