Other than logging off your machine and logging back on, is there a command you can run to update your local access token. This way when I add a user to a global group that is connected via VPN, I can run the command and then run gpresult and see the group listed. We have a Windows 2003 AD domain.