Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a DOS command I can run on my client PC to fetch a new group assignment? I'm logged in as the user. I just added a security group to "Member Of" on the primary AD server.

Can I pull this information immediately?

Is there a way on the client to list the groups so I can verify the change?

I prefer the most compatible way, I'm using XP for the client.

share|improve this question
up vote 3 down vote accepted

Log off and log back on. That will update your user token. whoami / groups and klist.exe will both show you the membership and tickets assigned to the logged in user.

This TechNet article goes into more detail.

If you add a user to a group after the user’s access token has been issued, or modify privileges assigned to the user account, the user must log off and then log on again before the access token will be updated.

share|improve this answer

You can use: net user username /domain

share|improve this answer
net user doesn't show nested groups and doesn't show universal groups in certain circumstances. It also doesn't update the current token, it would just list the membership. – MDMarra May 21 '13 at 15:56

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.