Login cannot view definition even when granted the permission I have an AD login which is in the below AD groups.


DOMAIN\GlobalGroup1
DOMAIN\GlobalGroup2
DOMAIN\GlobalGroup3
DOMAIN\UniversalGroup1


DOMAIN\UniversalGroup1 has been granted VIEW ANY DEFINITION on this SQL Server instance (10.50.6000.34). The user is not able to view any of the databases' definitions.

Other members of the DOMAIN\UniversalGroup1 appear to be able to view definitions.

EXEC xp_logininfo 'DOMAIN\user','all'


Only displays the 3 GlobalGroups. This is a documented limitation of the xp_logininfo procedure. 

EXEC xp_logininfo 'DOMAIN\UniversalGroup1','members'


Confirms the user's membership to the group.

How can I troubleshoot this problem? Is the issue in any way related to the difference between the global and universal group?
Is UAC enabled? UAC can truncate the user's list of group memberships