Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

So, when user logs in to their workstation, they receive SIDs of groups they are members of, and this is used for the length of the session, until logging off.

Is there a way to refresh membership SIDs information without actually having to log off and log on again? I've added myself to a group, but can't log off without interrupting running process that requires these permissions. Don't want to have to go through these steps again...

share|improve this question

4 Answers 4

up vote 3 down vote accepted

No supported way that I know of. You MAY be able to use RUNAS to start a command prompt with a new session and specify your same account name again... and that may do it... but I'd be running most (if not all) things that need special permissions as services and/or under service accounts.

share|improve this answer
  • Open Task Manager
  • Kill all instances of explorer.exe
  • Go to File → "New Task (Run...)"
  • Type in cmd
  • In the command prompt type RunAs /user:<domain>\<user> explorer.exe

Done.

share|improve this answer
    
This does not work on my case as I didn't want to interrupt already running process that needed it to begin with. –  Serge Jan 18 '13 at 18:24
    
This works amazingly well. After doing it, you may need to run your logon script again to map your drives. –  Glen Little Jun 30 at 23:24
1  
You can also run whoami /groups to see if your session knows about the new group membership. –  Glen Little Jun 30 at 23:26

Is Gpupdate something that would work for you?

http://technet.microsoft.com/en-us/library/bb490983.aspx

Refreshes local and Active Directory-based Group Policy settings, including security settings.

gpupdate [/target:{computer|user}] [/force] [/wait:value] [/logoff] [/boot]
share|improve this answer

I was able to get a new group to show up in whoami /groups using a combination of:

  1. Run net use * /delete to disconnect all active network shares
  2. Run net use \\company.domain.com to reconnect to active directory domain
  3. Lock workstation via start menu
  4. Login and run whoami again to verify new group is added

Not sure what step actually cause it to work, but I was able to access a new network share by completing the above steps.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.