How to update user permissions and group memberships? 1

[DKMr]

Hi all,

In Windows 2000 and 2003, when you add a user to a new group like a file share group, or a add them to the local admin group on their workstation, the change does not take effect until that user logs off and then logs back on to the network or machine.

Does anyone know a command-line command that can update permissions instantly like the command 'gpudate' does for implementing group policy changes instantly?

It would be so nice to know. Thanks!!!

 

[NickFerrar]

It's pretty tricky as you need to regenerate the kerberos ticket. Couldn't find any utility that seems to do this but this article:

http://msdn.microsoft.com/msdnmag/issues/0500/security/

(in figure 5) has a script that will renew your own ticket, I guess if you're good at scripting you can alter the code to accept a logonid parameter at run time.

 

[rockjockb]

To manually force Group Policy to refresh under Windows 2000, you use the command

secedit /refreshpolicy

Microsoft has replaced this command in Windows 2003 and XP with the command

gpupdate