This test script takes 10 to 30 seconds to run on Windows 10 1709 (Fall Creators Update) with KiXtart 4.67:

 Code:
break on
? @date + " " + @time + "." + @msecs
? "CacheAge: " readvalue("HKCU\Software\KiXtart\TokenCache", "CacheAge")
? "wksta: " @wksta
? "S-1-5-32-545: " sidtoname("S-1-5-32-545")
? @date + " " + @time + "." + @msecs
? "ingroup: " ingroup(@wksta + "\" + sidtoname("S-1-5-32-545"))
? @date + " " + @time + "." + @msecs


It takes less than a second on Windows 7.

I've checked HKCU\Software\KiXtart\TokenCache:
  • CacheAge does not change.
  • If I modify the value of an existing SID like S-1-5-4: it gets refreshed, however CacheAge is not modified.
  • If I create a new (fake) SID: it stays as-is.


I've also tried to change WOW64AlternateRegView, or use an older version (4.53), but that had no impact.

Can anyone confirm these findings?


Edited by Flavien (2017-11-24 02:07 PM)