Security filter against AD groups. When you add a computer, does it need to reboot to fall into scope.


  • This should be an easy one. I have a 2008r2 domain. When I add a computer to an AD security group, so it will get targeted from a GPO that has that same group in its security filter, does the computer need to reboot to start processing any part of that policy?  It has always seemed that computers need a reboot to pick up their group memberships, but I wanted to double-check.


    • Edited by DaveBryan37 Wednesday, April 22, 2015 9:06 PM
    Wednesday, April 22, 2015 9:06 PM


  • Hi Dave,

    Normally for a computer account to become aware of the group membership change a reboot is required. 

    Also some group policy can be applied after a comouter reboot. So I'd suggest to reboot your compputer.

    Best Regards,


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact

    Friday, April 24, 2015 8:17 AM