Quote:

rename a group then EnumGroup() doesn't show the changes.



This is a known limitation of the caching mechanism and is documented in the manual.

If you are likely to encounter this a lot you might be better off querying group membership using native AD mechanisms.

Alternatively, remove the group cache registry key as the first task in your script. This will slow it down a bit as it will always need to enumerate group membership once per script invocation, but it does guarantee that the cache is up-to-date.