We have joined two sites between two of our domains - Use of Univeral groups - can't change password
Now that we have created a two way trust between two sites and our two domains.
We cannot change user passwords yet on the other domain.
Do we need a universal group or do we need to just wait for sync to happen.
Does it make sense to use a universal group? If so, how and for what.
Looking for a good tech doc on Windows 2008 groups.
It could be possibly related to your Universal Group membership, especially if GC is not available and you don't have Universal group caching enabled. I usually avoid using Universal groups, unless there's a VERY GOOD REASON to use them.
Here's info on groups:
http://thelazyadmin.com/blogs/thelazyadmin/archive/2005/10/18/Active-Directory-Groups-Demystified.aspx
...and Microsoft's complete reference on groups:
http://technet.microsoft.com/en-us/library/cc776995(WS.10).aspx