How to Force computers to update security groups without a reboot

Problem:

You have added a computer to a security group and are maybe trying to apply this to a group policy but Security Filtering on a gpresult /r shows that the computer is not in the group.  How do we get it added without a reboot?

Solution:

The way to resolve this is in a simple command.

First run this command to show all your  existing computer TGT sessions:

klist.exe sessions | findstr /i %COMPUTERNAME%

 

Then run this command to show all cached updates:

klist.exe -li 0x3e7

 

Then run this command to clear all the cached TGT sessions:

Windows Server 2016 – Windows Server 2022

klist –li 0x3e7 purge

 

Windows Server 2008 R2 – Windows Server 2012 R2

klist -lh 0 -li 0x3e7 purge

 

Now simply run the below command to get your new group memberships:

gpupdate /force

Leave a Reply

Your email address will not be published. Required fields are marked *