How long does user authentication last when authenticating from Active Directory?
By default, Enfold Server caches authentication information for users to reduce the number of queries to Active Directory. By default it is set for 10 minutes (this is configurable from the configuration tab under the authentication profile you have chosen). This can become an issue if you have changed an AD group name (or removed a group or user). For the next ten minutes after you make that kind of change, there exists the possibility that Enfold Server will “remember” the result of the recent query to Active Directory for the user sign on. After ten minutes, things will be fine, but if you wish, you can clear all authentication caches by going to Plone Site Setup –> Authentication Profiles and click the Clear Authentication Cache button on the bottom of the page.