Win 2003 Universal Groups

[Lee Messenger]

Having read some of the comments on here regarding MS's AGLP group strategy
and also some technotes on Universal groups. I am wondering if someone
could explain why not to use just Universal groups in a pure Win 2003 AD
Forest. Considering that Universal group membership can now be cached on
non-GC DC's it now means clients do not need to contact the GC to log in.
Therefore, I would have thought it would be simpler to just use UV groups
all the time. Is this the right path to go down or should I still use MS's
AGLP strategy.

All thoughts appreciated.

LM

 

[Joe Richards [MVP]]

I would only recommend using UG's if the membership is something that needs to be queried throughout the world.
Otherwise you are adding additional replication traffic to all dc's in the forest for no good reason.