To ensure their validity, the credentials for prevalidated users and groups are periodically retrieved from Active Directory. For example, the credentials are refreshed whenever you do the following:
- Reboot the local computer.
- Start or restart the adclient process.
- Run the adflush command to clear the cache.
- Changes a password from the local system.
The credentials are also periodically refreshed at the interval defined by the adclient.prevalidate.interval parameter to ensure that prevalidation will continue working after password changes.