Child domain user does not show parent domain group membership

Hello Everyone,

We just ran across something interesting - from what I know, everything is
working properly. We have a parent domain - domain.com and a single child
domain - child.domain.com

When I look at universal distribution groups in the parent domain,
of which a child domain user is a member, I see their name in the list. If
I look at the "Member Of" tab on the child domain user in ADUC, it does not
show that they are members of those groups.

Since the group is universal, should the Member Of tab show the user's
membership since I thought that the universal group info is replicated? If
not, is there a global way to see all the groups that the user is a member of?

Thanks in advance!!!

dacrusher
Wed Jun 18 09:34:01 PDT 2008

I would also like to add that from the GAL in Exchange 2003, when I look at
the universal distribution group properties, I see the user at which point if
I then select 'Modify Members' and then select the Properties of the child
domain user - the Member Of tab shows ALL groups of which the user is a
member - If I select the User from the GAL individually, then it still only
shows the child domain group membership.

How is the information being queried when accessing from the Properties of
the user from within the Universal DG?


"da crusher" wrote:

> Hello Everyone,
>
> We just ran across something interesting - from what I know, everything is
> working properly. We have a parent domain - domain.com and a single child
> domain - child.domain.com
>
> When I look at universal distribution groups in the parent domain,
> of which a child domain user is a member, I see their name in the list. If
> I look at the "Member Of" tab on the child domain user in ADUC, it does not
> show that they are members of those groups.
>
> Since the group is universal, should the Member Of tab show the user's
> membership since I thought that the universal group info is replicated? If
> not, is there a global way to see all the groups that the user is a member of?
>
> Thanks in advance!!!

Jorge
Wed Jun 18 13:28:36 PDT 2008

see:
http://support.microsoft.com/?kbid=833883

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"da crusher" <dacrusher@discussions.microsoft.com> wrote in message
news:D1294E44-CB87-4A0C-9920-721993FF3E0D@microsoft.com...
> Hello Everyone,
>
> We just ran across something interesting - from what I know, everything is
> working properly. We have a parent domain - domain.com and a single child
> domain - child.domain.com
>
> When I look at universal distribution groups in the parent domain,
> of which a child domain user is a member, I see their name in the list.
> If
> I look at the "Member Of" tab on the child domain user in ADUC, it does
> not
> show that they are members of those groups.
>
> Since the group is universal, should the Member Of tab show the user's
> membership since I thought that the universal group info is replicated?
> If
> not, is there a global way to see all the groups that the user is a member
> of?
>
> Thanks in advance!!!