Have you verified that you have global Catalog server enabled, that they are working properly and that the clients can access them properly.
Are the Global Catalalog services properly registrered in DNS?
Ingroup (v4.02) works fine for me with my AD.
On an AD client, delete the following registry key: HKEY_CURRENT_USER\Software\KiXtart\TokenCache
Run the logon script is the key and its data recreated?
If yes, did the sids match the objects in the AD?
Are you using Sid history (Yuk!)?
Edited by Howard Bullock (2006-07-21 08:53 PM)
