Hello all. Is it possible immediatly revoke user administrative persmissions in Windows 7, which was removed from "administrators" group. As Example: user logged on when he was member of "administrators" group, and during his session, was removed from that group, but he is still not logged off.

The user will have the 'administrator' token until they log off of the machine. The only way to immediately revoke that token is to force the user to log off.Rich Prescott | Infrastructure Architect, Windows Engineer and PowerShell blogger | MCITP, MCTS, MCP Engineering Efficiency @Rich_Prescott Client System Administration tool AD User Creation tool

Thanks. Ok, so only kernel can create or change this kind of token? Best regards.