Thomas,
  The server will not update its group memberships until it refreshes its 
kerberos ticket.  That can take up to a week.  Alternatively, you can reboot 
the system, or, if you have console access, open a command line under the 
system's credentials.  You can then use 'klist purge' to delete the existing 
tickets and force the system to generate a new one.  If you use 'klist purge' 
in a normal command window, you will only delete your tickets, not the systems.
 
-Andrew

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thomas Hess
Sent: Thursday, December 07, 2006 6:20 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Group Membership Update Frequency

hi there,

when does a server recognize that he is part of AD global Security group?
Do i have to reboot every system or is there an update frequency where the 
server checks the AD?

I need this to know because i want to use the Security Group Filtering with 
GPO´s

Thanks in advance
Thomas
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/

Reply via email to