Hi currently I allocate access to network shares on Windows 2003 via security groups. When I remove a user from one of these groups, in order to deny them access to any of these shares the user needs to log off and back on for the denial to take effect. Is there any way around this? Thanks!

Hello, no, the group membership is included in the user token given during logon to the domain. You have to logoff/logon to remove or grant permissions.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

many thanks, that is what i discovered using a tool called tokenz.exe but wanted to verify! Thanks!