Is the issue around Kerberos tickets? Is it that YOU want to update Their memberships or you want Them to be able to do it to themselves? You could have them purge their tickets with klist if they are somewhat savvy...
From: James Rankin [mailto:[email protected]] Sent: Tuesday, April 20, 2010 3:40 AM To: NT System Admin Issues Subject: Group membership updates I know that there's probably no way of doing this, but I thought I'd ask....is there any way of updating a logged-on user's AD group memberships without them logging out of the system? Everything I've read suggests that there is no way to update an access token except by logging in again, so short of launching an application with a RunAs command, I think I may be pretty much snookered. I live in hope though..... TIA, JRR -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
