Universal Groups are only available in native-mode domains. When you logon to a native-mode domain, Universal Groups membership is read from the Global Catalog server.

You can cause a Windows Server 2003 domain controller to cache Universal Groups membership:

1. Open the Active Directory Sites and Services snap-in from the Administrative Tools folder.

2. Select the site that contains the DC that will cache the Universal Groups membership.

3. Right-click NTDS Settings in the right-hand pane and press Properties.

4. On the Site Settings tab, check the Enable Universal Group Membership Caching box.

5. Press Apply and OK.

NOTE: The cache is refreshed periodically. You can configure the Refresh cache from drop-down box.