We have a software that works on workstation that is a member of another domain in another forest.
When this software starts it connects to our domain and checks user's group membership with api function Getgroups.
Sometime domain controller returnes all groups to wich user belongs but sometime not all groups but only part of them.
Our forest is devided into several sites and some sites are behind firewall. I think that the problem can be because of the inaccessible controllers, but why sometime method Getgroup returnesony part of domain groups to wich user belongs to?
When this software works on PC in our domain everything is all right.
I do understand that it is a difficult question.
Thank you.