How to update group membership for a domain user without a restart