A change in group membership or group name is not detected by Validation Logic (4267191)

After a user is added to or removed from a group in Windows, Desktop Authority may not properly validate elements based on that group membership. Similar behavior may occur when the name of an existing group is changed.

Retrieving group membership can be costly in terms of network traffic and processing time. The current version of KiXtart caches the group-membership information in the registry as "token cache". This means that once cached, subsequent logins will require much less time to retrieve the group-membership information. The token cache is automatically refreshed every 30 days. The token cache is stored in the registry on the client workstation in the following location:

If user group membership has changed or an existing group name is changed, you may need to force a refresh of the token cache.

1. Launch the Desktop Authority Console. 
2. Select Client Configuration | Global Options | User Management Options | Troubleshooting.
3. Click "Edit"
4. Place a check in the box "Force KiXtart to refresh its group token-cache during each logon attempt"
5. Save
6. "Replicate changed files (default)".

Click To See Full Image.