Universal Groups are only available in native-mode domains. When you logon to a native-mode domain, Universal Groups membership is read from the Global Catalog server.
You can cause a Windows Server 2003 domain controller to cache Universal Groups membership:
1. Open the Active Directory Sites and Services snap-in from the Administrative Tools folder.
2. Select the site that contains the DC that will cache the Universal Groups membership.
3. Right-click NTDS Settings in the right-hand pane and press Properties.
4. On the Site Settings tab, check the Enable Universal Group Membership Caching box.
5. Press Apply and OK.
NOTE: The cache is refreshed periodically. You can configure the Refresh cache from drop-down box.
