SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a problem with AD authentication. When I add a user to an AD group the user gets instant access. However if I remove a user that user continues to have access till the following morning. I found the only way to immediately cut access is to do an iisreset but obviously this isn't a practical solution. Just wondering if this behaviour is normal. Incidentally I have tried reducing the token timeout. It makes no difference nor does getting the user to logout and log back in. I don't seem to remember having this problem in 2007. It's only happening in SP 2010.

share|improve this question

Try to do User Profile Synchronization and run Set-SPProfileServiceApplication cmdlet with

-PurgeNonImportedObjects $true 

to delete users that were deleted from AD.

share|improve this answer
That works for someone who leaves the organisation but in my case I am only removing access to a specific AD group. They still belong to other Groups. – tonym Apr 30 '13 at 20:08

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.