ADUC doesn't connect on the global catalog port. What you're seeing is expected 
behavior more or less.

Thanks,
Brian Desmond
[email protected]

c - 312.731.3132

Active Directory, 4th Ed - http://www.briandesmond.com/ad4/
Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian

From: Christopher Bodnar [mailto:[email protected]]
Sent: Friday, March 27, 2009 2:11 PM
To: NT System Admin Issues
Subject: Universal security group question

Domain and forest are both 2003 functional level:

Got a user in a child domain (child1.contoso.com). User needs access to 
resource in a parent domain (contoso.com). There is a universal security group 
setup for the resource in the parent domain. The user's account (from the child 
domain) has been added to it. When I look at the Group in AD I see the user, 
but when I look at the user's group membership in the child domain, it doesn't 
show her as belonging to that security group.

I have seen this, which describes the symptoms exactly:
http://support.microsoft.com/kb/833883

Except I am connecting to a GC, not just a DC.  I've used ReplMon, but so far I 
don't see any lag or issues with replication.

Anyone run into this before?


Chris Bodnar, MCSE
Sr. Systems Engineer
Distributed Systems Service Delivery - Intel Services
Guardian Life Insurance Company of America
Email: [email protected]<mailto:[email protected]>
Phone: 610-807-6459
Fax: 610-807-6003







________________________________

This message, and any attachments to it, may contain information that is 
privileged, confidential, and exempt from disclosure under applicable law. If 
the reader of this message is not the intended recipient, you are notified that 
any use, dissemination, distribution, copying, or communication of this message 
is strictly prohibited. If you have received this message in error, please 
notify the sender immediately by return e-mail and delete the message and any 
attachments. Thank you.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to