Take the 2-minute tour ×
Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. It's 100% free, no registration required.

This question already has an answer here:

I am configuring a new, fully AD group based security scheme on an existing SQL Server 2008.

When I change the group to which I belong to test my configs, it seems that there is quite a delay between the change and it appearing in SQL Server.

To try and improve this I do:

repadmin /syncall /Ade (to force full domain syncing)
DBCC FREESYSTEMCACHE(‘TokenAndPermUserStore’)

I've also tried disconnecting and reconnecting the user in SSMS.

Any idea how I can get the AD group permissions to apply faster? Testing once every ten minutes is painful!

share|improve this question

marked as duplicate by Jon Seigel, Mark Storey-Smith, dezso, Max Vernon, Paul White Jun 20 '13 at 23:54

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

2 Answers 2

AG Groups are only updated when the user gets a new token from the domain controller. The only way to speed this process up that I know of is to log off the machine and log back in.

I would recommend using a Virtual Machine to do this so that you don't want to kill yourself.

share|improve this answer

You can try klist purge:

Allows you to delete a specific ticket. Purging tickets will destroy all tickets that you have cached, so use this attribute with caution. It might stop you from being able to authenticate to resources. If this happens, you will have to log off and log on again.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.