Are Domain Local Groups in the PAC?

[Michael B Allen]

On 11/26/07, Michael B Allen <ioplex at gmail.com> wrote:
> Hi,
>
> I'm doing some network analysis of Windows 2003 Server and I've
> noticed that Domain Local Groups are not in the PAC. Is that right?
> All the docs seem to indicate that DLGs should be in the PAC but I've
> captured some TGS-REPs for HTTP session tickets and they're not.

The size of the TGS-REP for a cifs ticket changes by 40 bytes when a
Domain Local group is added or removed. For an HTTP ticket it does not
change. So it seems that DLGs are not included in HTTP session tickets
but they are in cifs tickets.

Mike