I don't think the GC port has anything to do with it. I added the registry key mentioned in KB833883, and it displayed the non-local Universal memberships correctly.
Chris Bodnar, MCSE Sr. Systems Engineer Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: [email protected] Phone: 610-807-6459 Fax: 610-807-6003 _____ From: [email protected] [mailto:[email protected]] Sent: Friday, March 27, 2009 3:40 PM To: NT System Admin Issues Subject: RE: Universal security group question ADUC doesn't connect on the global catalog port. What you're seeing is expected behavior more or less. Thanks, Brian Desmond [email protected] c - 312.731.3132 Active Directory, 4th Ed - <http://www.briandesmond.com/ad4/> http://www.briandesmond.com/ad4/ Microsoft MVP - <https://mvp.support.microsoft.com/profile/Brian> https://mvp.support.microsoft.com/profile/Brian From: Christopher Bodnar [mailto:[email protected]] Sent: Friday, March 27, 2009 2:11 PM To: NT System Admin Issues Subject: Universal security group question Domain and forest are both 2003 functional level: Got a user in a child domain (child1.contoso.com). User needs access to resource in a parent domain (contoso.com). There is a universal security group setup for the resource in the parent domain. The user's account (from the child domain) has been added to it. When I look at the Group in AD I see the user, but when I look at the user's group membership in the child domain, it doesn't show her as belonging to that security group. I have seen this, which describes the symptoms exactly: http://support.microsoft.com/kb/833883 Except I am connecting to a GC, not just a DC. I've used ReplMon, but so far I don't see any lag or issues with replication. Anyone run into this before? Chris Bodnar, MCSE Sr. Systems Engineer Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: [email protected] Phone: 610-807-6459 Fax: 610-807-6003 _____ This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
