Refreshing user's group membership in active directory without log-off/log-on
No supported way that I know of. You MAY be able to use RUNAS to start a command prompt with a new session and specify your same account name again... and that may do it... but I'd be running most (if not all) things that need special permissions as services and/or under service accounts.
- Open Task Manager
- Kill all instances of explorer.exe
- Go to File → "New Task (Run...)"
- Type in
cmd
- In the command prompt type
RunAs /user:<domain>\<user> explorer.exe
Done.
Is Gpupdate something that would work for you?
http://technet.microsoft.com/en-us/library/bb490983.aspx
Refreshes local and Active Directory-based Group Policy settings, including security settings.
gpupdate [/target:{computer|user}] [/force] [/wait:value] [/logoff] [/boot]