Windows Server 2003 includes a new feature called universal group membership caching to locally cache a user’s membership in universal groups on the domain controller authenticating the user.
When a user logs on to the network, the global catalog provides universal group membership information for the account to the domain controller processing the user logon information. If a global catalog is not available when a user initiates a network logon process, the user is able to log on only to the local computer unless the site has been specifically configured to cache universal group membership lookups when processing user logon attempts.
Step 1.
click Start -> Administrative Tools and open “Active Directory Sites and Services”

Step 2.
in the console tree, click the site in which you want to enable universal group membership cashing

Step 3.
in the details pane, right-click NTDS Site Setting, and click Properties

Step 4.
select the “Enable Universal Group Membership Caching” check box

Step 5.
in “Refresh cache from” You can choose a site from which this site will refresh its cache

Step 6.
click “OK”

