I use InGroup() to install printers, software, copy program shortcuts and word templates for a group of users. Since KiXtart 4.5 InGroup() has troubles to determine the group membership correctly.

When I add the logged-in user to a new group or rename a group then EnumGroup() doesn't show the changes. The only thing that helped was inserting "kix32 /f > nul" in the .BAT-File that launches our kix-loginscripts. This refreshes the token cache on each logon. I would better like to switch it entirely off in future releases.

Intelligently detect changes in Active Directory always worked bad, maybe you know Recipient Update Service in Exchange that tries the same.