We are using a parent domain called domain.com and a single child domain called child.domain.com. If we see at universal distribution groups in the parent domain, of which a child domain user is a member, I can see their name in the list. When I look at the "Member Of" tab on the child domain user in ADUC, it will not show that they are members of those group. Because the group is universal, should the MemberOf tab show the user's membership, since I was thinking that the universal group info is replicated? If not, then is there a global way to check all the groups that the user is a member of? Thanks.