As I'm sure we all know, there are problems with logons once a user is a member of 1015+ groups. This is the famous "token bloat" problem that lots of organizations have. Thankfully, we have cleared up any token bloat problems we had.
My question, which I'm pretty sure I know the answer to, deals with how the token size is calculated. When you add a user to a group, their token size obviously increases. When you remove a user from a group, does that token size immediately decrease? Or does the token size not decrease until some "cleanup" procedure happens? (say every 4 hours or whatever)
Thanks for any information.