Posts Tagged "Tickets"

How to purge Kerberos tickets of the system account

Posted by Norman Bauer on Mar 30, 2016 in Active Directory, Environment | 0 comments

… or: How to update group membership information of the computer account. When updating Active Directory group membership of your users you usally ask them to logoff and logon again. You don’t tell them why, you just tell them to do so. What happens? When logging on again the group membership information of a user (within their kerberos tickets) gets updated and they can access the ressources they have access to. You can check which tickets a user has by using the klist command: But how about the system / computer account. You can’t logoff and logon the system account. You...