I assume you are using ADUC to validate the group's membership. This is a feature of adminpak.msi version 2000. There is a KB article on this behavior with workarounds noted in adminpak.msi version 2003 including a reg hack. Here are the details that were sent to me by a peer.
You cannot view a user's Universal Group membership in Windows Server 2003 Active Directory Users and Computers when Universal Groups do not reside in the local domain (833883) "When you use the Active Directory Users and Computers snap-in, and you click the Membership tab on the user's Properties dialog box to view the Universal Group membership for a specific user, only the universal groups that reside in the local domain are shown. If the user also belongs to universal groups that do not reside on the local domain, these universal groups do not appear in the Membership tab of the user's Properties dialog box, even when the non-local domain resides in the same forest and you are connected to a global catalog server in the local domain." A hotfix is available. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Monday, August 23, 2004 8:22 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Universal Group user population I have a Question about adding people to a Universal Group. I have some Admins that own a Universal Security Group, and have added users from a child domain to the group. When they look at the Universal Group members, they see the user is a member of the group. But when they look at the users properties, they notice that the members of tab doesn't list the users membership in the group. Accounts within the same domain show up. I have waited about two hours for replication latency before checking. So my question is, is this normal, and can someone from a parent domain add users from child domains to a universal group. Will it update the child domain Users members of attribute with the universal group membership? Thanks, Todd List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
