You stated that you are logging on to the domain at server1.
Again, please tell if the global groups that are failing are in the domain on server1 or the domain of server2.
Since the "logon domain" is that of server1 (I wish zz_vf_zz would give use some names to reference), the KXRPC service is not needed on server2 because it is not a DC in the logon domain.
We still do not know what version of KiXtart you are using. Please execute the code (macro printouts) supplied by Lonkero so that we have additional information with which to help understand what may be wrong here.
[ 10 July 2002, 18:59: Message edited by: Howard Bullock ]
