How to update sys.login_token without restart SQL Server Service
The client refreshes the login token, not SQL Server.

Either log out/in, or lock+unlock their PC
This forces an AD authentication(token rebuild)

There also other methods...


Serverfault also suggest crashing explorer.exe on the client
I've not tried the klist approach. YMMV


Until the token is rebuilt, the login token as read by SQL Server will be stale.