Is there a facility in SSSD to perform a group policy update and application without requiring a login?  Like the windows gpupdate.exe command line tool?  An example scenario I’m thinking about is a change in an Access Control GPO.  The administrator of the system, as root, either invalidates the SSSD cache or removes it completely.  If the admin wanted group policy to get downloaded and cached immediately, is there a way to do that, or is login the only trigger for that action?

Todd