When adding a computer object to an AD group, at which point in time does the group membership become active? Is there some kind of kerberos refresh interval (similar to group policy refresh)?
I know it becomes active for sure when the computer reboots, also I am aware of the klist -lh 0 -li 0x3e7 purge
trick.