Force a refresh of privileges
We have developed a utility that creates a specific group, defines access rights for this group and adds users to that group. It also denies all users access to these folders. This tool is run as admin in Vista. However, users cannot access before a logoff and a logon. Is there a way to force the refresh of the effective privileges by calling an API?We have developed a utility that creates a specific group, defines access rights for this group and adds users to that group. It also denies all users access to these folders. This tool is run as admin in Vista. However, users cannot access before a logoff and a logon. Is there a way to force the refresh of the effective privileges by calling an API?

Software/Hardware used:
ASKED: April 29, 2008  7:15 PM
UPDATED: May 1, 2008  1:33 AM

Answer Wiki:
The user receives his/her security token at logon. The security token contains information regarding the user's group membership and other rights. If you add or remove a user to/from a particular group, then that user needs to receive a new token in order take advantage of the group membership. This process only occurs at logon. It cannot happen "on the fly."
Last Wiki Answer Submitted:  May 1, 2008  1:33 am  by  Bdinerman   345 pts.
All Answer Wiki Contributors:  Bdinerman   345 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _