Forum Discussion
Solved
Long adding users to the group in Windows Server 2022
Hello friends I have probably a trivial problem for you guys, but I have no idea how to speed it up. I'm creating a new group in AD (Global - Security). I am adding a user to this group. The pr...
- Group Membership is only evaluated on logon. So, if you change the membership of a user (or a group the user belongs to), you must tell the user to logoff and logon again. Afterwards he should immediately have his new permissions.
Hello! It sounds like you're experiencing some delays with group membership updates in Active Directory. Here are some potential solutions to help speed up the process:
- Check replication: Ensure that your domain controllers are replicating properly. If one domain controller has the updated group membership but the other does not, then users connecting to the slower domain controller may experience delays in accessing resources.
- Enable group caching: Enable group caching on your client machines so that they don't need to query the domain controller every time a user logs in. This can help speed up logins and access to resources.
- Reduce the number of groups: If you have too many groups in your environment, it can slow down the process of updating group membership. Consider consolidating groups or reorganizing them to reduce the total number.
- Increase the group membership cache refresh interval: By default, the group membership cache is refreshed every 2 hours. You can increase this interval to reduce the frequency of updates, which may help reduce the load on your domain controllers.
- Monitor performance: Use performance monitoring tools to identify any performance issues on your domain controllers or network infrastructure that may be contributing to delays in group membership updates.
I hope these suggestions help!