Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Every time I request a permission change the IT group at my company instructs me to wait 20 minutes and reboot the computer. I cannot believe that in this day and age you still need to reboot the computer to clear whatever cache stores the permissions locally. It feels like something out of the NT 4 days.

  • Do you actually still need to reboot the computer?
  • Is a logout/login sufficient?
  • Is there still a long time(20 minutes) for the changes to propagate through the AD tree?
share|improve this question

3 Answers 3

up vote 4 down vote accepted

It depends on what the "permission change" is. If they are adding you to a group, you will need to log off/on to effect the change. If they are adding your account, or a group you are already in, to a resource, you wouldn't need to to log off/on.

FYI: If the change is to a machine policy (which can be indirectly via loopback processing), you will need to reboot.

share|improve this answer

Running gpupdate /force then logging out then in should be fine.

share|improve this answer

Normally a logout/login should be sufficient.

gpupdate - as mentioned in another answer - will not be enough.

Most likely your IT department manages permissions with group memberships. And those are only updated on logon.

The 20 minutes are due to the default replication frequency of 15 minutes. This could be improved by enabling change notifications.

share|improve this answer
1  
The other answer mentions both gpupdate and logging out then in... –  soandos Dec 23 '11 at 16:50
    
Oh. I think I shouldn't post answers when I'm too tired... –  mich732 Dec 23 '11 at 20:29

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.