Active Directory: Universal Group Membership Caching

Hi,

1) This is related to Active Directory
2) This is related to "Universal Group Membership Caching"
3) My questions: i) What is the function of "Universal Group Membership Caching" (firstly, Explain it with your own wording  and then provide the Links (if any) please , ii) How to configure this Group (Provide the PATH please)?
4) Thank you

Tjie
tjieAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

firemanf29Commented:
It's simply locally caching a user's memberships in universal groups.  I've never set it up because you can accomplish the same goal and more by making the remote DC a global Catalog server.  If you have a single domain forest with a single site it's rather useless.  It was recommended when you have a remote site with a slow or unreliable link.

I recommend just making your DC a global catalog and forget about UGMC.

http://www.windowsnetworking.com/kbase/WindowsTips/Windows2003/AdminTips/ActiveDirectory/Whentouseandnotuseuniversalgroupmembershipcaching.html
http://technet.microsoft.com/en-us/library/cc737290.aspx
0
SweetJ21Commented:
Universal group caching is a feature of Windows Server 2003 that allows a remote domain controller to process group membership information for users without having to contact a global catalog server, but only if the user has logged onto the domain from that location before.

A global catalog has to be contacted during the login process to get the group membership information about a user to assign the appropriate permissions. Universal group caching will allow a domain controller to cache the membership information from a previous successful login, so a global catalog server will not need to be contacted for future login attempts.

It helps reduce authentication traffic between sites, more so than adding a global catalog server to the remote site.

This should help you understand universal group caching a little bit better.
http://support.microsoft.com/kb/893435

This shows you how to enable universal group caching for an Active Directory site.
http://technet.microsoft.com/en-us/library/cc775528.aspx
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
tjieAuthor Commented:
Hi,

1) Thank you both of you
2) SweetJ21 answered all the 2 questions above

Tjie
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.