Universal Group Membership Caching is an Active Directory feature that caches a user's universal-group membership on a domain controller.
Simple definition
Universal Group Membership Caching is an Active Directory feature that caches a user's universal-group membership on a domain controller. It belongs to the Active Directory vocabulary and is useful when reading architecture diagrams, product documentation, logs, or administration procedures.
What is it used for?
Its main purpose is to allow sign-ins at a site without a local Global Catalog while reducing WAN dependency. The practical value depends on the surrounding architecture, security model, and operational requirements.
How does it work?
After an initial lookup from a Global Catalog, the site DC temporarily caches universal-group memberships and refreshes them periodically.
Key points
- Scope: An Active Directory feature that caches a user's universal-group membership on a domain controller.
- Operational goal: Allow sign-ins at a site without a local Global Catalog while reducing WAN dependency.
- Implementation: After an initial lookup from a Global Catalog, the site DC temporarily caches universal-group memberships and refreshes them periodically.
Points to watch
Caching reduces WAN calls but can delay universal-group membership changes; design it according to site connectivity.
In short
Universal Group Membership Caching = an Active Directory feature that caches a user's universal-group membership on a domain controller. Use it when you need to allow sign-ins at a site without a local Global Catalog while reducing WAN dependency.