If I put those Groups and Users into a Universal Group (should not put users in a Universal Group) that WinNT provider will fall on it's face and not find anyone because it does not understand Universal Groups.

What you did was look for a user in either a Local or Global group which it does support, but it does not support the Universal Groups.