Thanks, now we are getting somewhere:

The TokenCache looks correct, except I also see some residual group names for a domain we migrated awhile back (>30 days). I thought this information would have been flushed when SID History was removed.

Shouldn't this cache be updated after 30 days? I'm going to test flushing the cache and seeing if the old group names repopulate.

Otherwise the SIDs appear correct and resolve correctly with the sidtoname function and no 1332 errors are generated.

Thanks

[ 05. May 2003, 23:42: Message edited by: chelget ]