Active Directory: Universal Group Membership Caching

Posted on 2008-11-04
Last Modified: 2013-12-05

1) This is related to Active Directory
2) This is related to "Universal Group Membership Caching"
3) My questions: i) What is the function of "Universal Group Membership Caching" (firstly, Explain it with your own wording  and then provide the Links (if any) please , ii) How to configure this Group (Provide the PATH please)?
4) Thank you

Question by:tjie
    LVL 7

    Assisted Solution

    It's simply locally caching a user's memberships in universal groups.  I've never set it up because you can accomplish the same goal and more by making the remote DC a global Catalog server.  If you have a single domain forest with a single site it's rather useless.  It was recommended when you have a remote site with a slow or unreliable link.

    I recommend just making your DC a global catalog and forget about UGMC.
    LVL 3

    Accepted Solution

    Universal group caching is a feature of Windows Server 2003 that allows a remote domain controller to process group membership information for users without having to contact a global catalog server, but only if the user has logged onto the domain from that location before.

    A global catalog has to be contacted during the login process to get the group membership information about a user to assign the appropriate permissions. Universal group caching will allow a domain controller to cache the membership information from a previous successful login, so a global catalog server will not need to be contacted for future login attempts.

    It helps reduce authentication traffic between sites, more so than adding a global catalog server to the remote site.

    This should help you understand universal group caching a little bit better.

    This shows you how to enable universal group caching for an Active Directory site.

    Author Comment


    1) Thank you both of you
    2) SweetJ21 answered all the 2 questions above


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Free book by J.Peter Bruzzese, Microsoft MVP

    Are you using Office 365? Trying to set up email signatures but you’re struggling with transport rules and connectors? Let renowned Microsoft MVP J.Peter Bruzzese show you how in this exclusive e-book on Office 365 email signatures. Better yet, it’s free!

    Companies that have implemented Microsoft’s Active Directory need to ensure that the Active Directory is configured and operating properly. If there are issues found and not resolved, it eventually leads the components to fail or stop working and fi…
    Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip is around source server preparation. No migration is an easy migration, there is a…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now