Universal group caching windows 2003

He has written more than a thousand articles and has authored or been series editor for over 50 books for Microsoft Press and other publishers. He currently runs an IT content development business in Winnipeg, Canada.

Your email address will not be published. Learn about the latest security threats, system optimization tricks, and the hottest new technologies in the industry. Over 1,, fellow IT Pros are already on-board, don't be left out!

TechGenix reaches millions of IT Professionals every month, and has set the standard for providing free technical content through its growing family of websites, empowering them with the answers and tools that are needed to set up, configure, maintain and enhance their networks.

When you have lots of WAN bandwidth available 2. Office Office Exchange Server. Not an IT pro? Windows Server TechCenter. Sign in. United States English. Ask a question. Quick access. Search related threads. Remove From My Forums. Answered by:. Archived Forums.

Directory Services. Sign in to vote. Hello All, I'm working on a lab environment right now. I have setup 2 DCs for mydomain. I have now setup a DC for my na. My question is, should I be enabling Universal Group Membership Caching for both sites in my mydomain. The option is greyed out for both sites in my NA. Monday, August 3, AM. Hi Mike, Thank you for posting here. When Windows Server was released, I tested the logon process to see whether new user accounts would be able to log on when there were no global catalog servers in the domain.

I found that new users' accounts ones that haven't been used for previous logons couldn't log on when the global catalog server was offline. You can read more about the requirement for a global catalog server during the logon process in Microsoft Knowledge Base article , " Global Catalog Server Requirement for User and Computer Logon. In preparation for writing this article, I configured a test network to ensure that I correctly describe the Windows Server interface and output:.

Figure 1 Domain functional level: Windows Native. Figure 2 Message indicating that the global catalog server is offline. Therefore, you might expect that my subsequent logon attempts with these four accounts failed. However, I was able to log on using all four Branch user accounts. One significant fact frequently isn't stated explicitly in the documentation I've seen on this topic: Only in a multi-domain forest are global catalog servers required for logon.

As previously stated, the domain functional level must also be Windows Native or higher. Since I only had a single domain environment at this point, however, the global catalog server was not required for the domain accounts to log on.

Therefore, I created a few more user accounts and added another domain to the forest. Once the new domain was in place, I was no longer able to log on with new user accounts without the global catalog server. However, I could log on with the accounts that I previously created, using the computers that had previously logged on. This was allowed because cached credentials on the local computers were used to authenticate the user accounts. If you want to learn more about the logon process, including cached credentials, see the Microsoft TechNet article " How Interactive Logon Works.

I would like to receive exclusive offers and hear about products from InformIT and its family of brands. I can unsubscribe at any time. Pearson Education, Inc. This privacy notice provides an overview of our commitment to privacy and describes how we collect, protect, use and share personal information collected through this site. Please note that other Pearson websites and online products and services have their own separate privacy policies.

To conduct business and deliver products and services, Pearson collects and uses personal information in several ways in connection with this site, including:. For inquiries and questions, we collect the inquiry or question, together with name, contact details email address, phone number and mailing address and any other additional information voluntarily submitted to us through a Contact Us form or an email. We use this information to address the inquiry and respond to the question.

We use this information to complete transactions, fulfill orders, communicate with individuals placing orders or visiting the online store, and for related purposes. Pearson may offer opportunities to provide feedback or participate in surveys, including surveys evaluating Pearson products, services or sites.

Participation is voluntary. Pearson collects information requested in the survey questions and uses the information to evaluate, support, maintain and improve products, services or sites, develop new products and services, conduct educational research and for other purposes specified in the survey. Occasionally, we may sponsor a contest or drawing. Participation is optional. Pearson collects name, contact information and other information specified on the entry form for the contest or drawing to conduct the contest or drawing.

Pearson may collect additional personal information from the winners of a contest or drawing in order to award the prize and for tax reporting purposes, as required by law.

If you have elected to receive email newsletters or promotional mailings and special offers but want to unsubscribe, simply email information informit.

On rare occasions it is necessary to send out a strictly service related announcement. For instance, if our service is temporarily suspended for maintenance we might send users an email.

Generally, users may not opt-out of these communications, though they can deactivate their account information. However, these communications are not promotional in nature. We communicate with users on a regular basis to provide requested services and in regard to issues relating to their account we reply via email or phone in accordance with the users' wishes when a user submits their information through our Contact Us form.