title: Global vs Universal Active Directory Group access for a web app
body: <p>I have a SQL Server 2000, C# &amp; ASP.net web app.  We want to control access to it by using Active Directory groups.  I can get authentication to work if the group I put in is a 'Global' but not if the group is 'Universal'.  </p>
  
  <p>How can I make this work with 'Universal' groups an well?
  Here's my authorization block:</p>
  
  <pre><code>  &lt;authorization&gt;
    &lt;allow roles="domain\Group Name Here"/&gt;
    &lt;allow roles="domain\Group Name Here2"/&gt;
    &lt;allow roles="domain\Group Name Here3"/&gt;
    &lt;deny users="*"/&gt;
    &lt;/authorization&gt;
  </code></pre>