Active Directory® Administrator's Pocket Consultant

Managing and Maintaining Universal Group Membership Caching

Universal group membership caching enables domain controllers to cache group membership information after retrieving it the first time rather than having to retrieve group membership information each time a user logs on. On domain controllers that are running Windows Server 2003 or later, the universal group membership caching feature is available by default and can be enabled on a per-site basis as needed. Although universal group membership caching is the name of the feature, this name is somewhat of a misnomer because, technically speaking, both security identifiers (SIDs) for global groups and universal groups can be cached.

Universal Group Membership Caching Essentials

Universal security ...