ASP.NET Windows Role Provider (AspNetWindowsTokenRoleProvider) not noticing a user being added to a new group

Question

I am trying to create an application that uses rules to limit the groups that are authorized to access the application. I am using Windows

Answer 1

It appears there is a delay between the time when a user is added or removed from a group, and the time when IIS will pick up on the change. There is a registry value you can set that to change the amount of time that user authentication tokens are cached, or disable caching all together. However, changing this value (UserTokenTTL) seemed to have no impact on the time it takes IIS to realize a user has been added to a group. The following page has more info about the UserTokenTTL registry key: http://support.microsoft.com/kb/954864