Folks, I have determined that my Win7 workstation is "blind" to domain group changes on the DC. If I create a group, or change the membership of a group on the DC, then these changes are never seen on the workstation.
As an experiment, I moved my workstation back to WORKGROUP and then rejoined the domain. This severe action seems to have refreshed things and whois now shows the correct group memberships. So what the hell can stop DC group changes from affecting my Win7 workstation? I'll keep searching, but I've never seen these symptoms before and I'm not getting any useful search results. Greg
