Skip to content

Apply computer account AD membership changes without reboot required


Applying AD group membership changes for computer account(s) without a reboot required? Use klist.exe (Kerberos List) which is part of the Windows 2003 Resource Kit tools. Install the resource toolkit and copy klist.exe to the appropriate computer.

Start a CMD-box  in elevated rights after the computer account is added to the appropriate AD security group and use the following command to purge kerberos ticket on the affected computer:

“klist.exe purge”

As simple as that…

2 thoughts on “Apply computer account AD membership changes without reboot required Leave a comment

  1. Hi,

    I made the command on a 2k8 server and after, I did an gpupdate /force and gpresult /R /Scope “computer”

    My group membership stays the same.

    The old groups which the server was a member remain and the new ones don’t appear.

  2. same result, this isn’t correct. The command prompt has to be opened as the “system account”.

Leave a comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.