Noticed something I don’t think I’ve seen before. Domain structure: empty root + 2 subdomains with users in them. My normal day-to-day account is not a domain admin, and I live in Subdomain A.
I open ADUC, focused on Subdomain A, and search Subdomain B for a user. When I find that user, I click on the Member of tab for that user. All I see are that user’s global group memberships in Subdomain B.
If our Account Admin (she’s not a Domain Admin but has been delegated the rights to create and modify users) opens ADUC and does the same thing, when she looks at the Member Of tab for the same user, she sees not only the Subdomain B global groups, but also the Universal Groups that user is a member of, which live in Subdomain A.
I thought it would be because my console was not focused on a Global Catalog, but I tried it on GC and non-GC domain controllers. Any idea why she sees the Universal groups and no one else does?
Systems Engineer
Cintas Corporation | 6800 Cintas Boulevard | Mason, OH 45040
Email: [EMAIL PROTECTED] | http://www.cintas.com
This e-mail transmission contains information that is intended to be confidential and privileged. If you receive this e-mail and you are not a named addressee you are hereby notified that you are not authorized to read, print, retain, copy or disseminate this communication without the consent of the sender and that doing so is prohibited and may be unlawful. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please delete and otherwise erase it and any attachments from your computer system. Your assistance in correcting this error is appreciated.
