Updating Active Directory user group memberships over VPN

[jgallas]

Tim thanks for your help so far.

I found this page and it looks like the user information does not get updated on the 12 hour interval only the computer info:

Active Directory Group Members Not Populating In BigFix Automatic Computer Group

The Active Directory Computer information (For the computer object) updates at the interval set by that client setting you mentioned. The Active Directory User information (For the logged on user) updates when the user logs in. It looks like this in the client log: At 15:10:28 -0500 - User interface process started for user 'strawgate’ At 15:10:39 -0500 - ActiveDirectory: User logged in - Domain: AD User: strawgate ActiveDirectory: Refreshed User Information - Domain: AD User: strawgate …

I suppose adding a gpupdate /force for the logged on user account when they connect to VPN might do the trick but I don’t know if that process will in fact force the client to evaluate new group memberships for the logged on user as well.