1

I am configuring a new, fully AD group based security scheme on an existing SQL Server 2008.

When I change the group to which I belong to test my configs, it seems that there is quite a delay between the change and it appearing in SQL Server.

To try and improve this I do:

repadmin /syncall /Ade (to force full domain syncing)
DBCC FREESYSTEMCACHE(‘TokenAndPermUserStore’)

I've also tried disconnecting and reconnecting the user in SSMS.

Any idea how I can get the AD group permissions to apply faster? Testing once every ten minutes is painful!

Improve this question
0

2 Answers 2

Reset to default
1

AG Groups are only updated when the user gets a new token from the domain controller. The only way to speed this process up that I know of is to log off the machine and log back in.

I would recommend using a Virtual Machine to do this so that you don't want to kill yourself.

Improve this answer
0

You can try klist purge:

Allows you to delete a specific ticket. Purging tickets will destroy all tickets that you have cached, so use this attribute with caution. It might stop you from being able to authenticate to resources. If this happens, you will have to log off and log on again.

Improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.