Â
I would like to confirm my understanding that to perform query from all the three domains that I have added to the Universal Group, I need to run port 3268. Is it correct?
The port 3268 is required to be used with UG in the event where the user needs to be queried for multiple domains. The reason as to why Microsoft recommends that the users should not be added to a UG is because during the login process, the GC which may not be local has to be contacted to verify the membership.
The GC has to be contacted by the logon process, and therefore using the UG will not be a big problem. But one thing to be keen about is the replication traffic. The UG members should be able to replicate the traffic to all the other GCs, and that should include those that are in the domains.
-Experttechyv
