We have AD users Authentication Issue

Question

Dear Community,

We have created three groups in AD Domain Controller for authentication of our AD Users (i.e. Internet Officers (with restriceted ), Middle Management(partially restricted), Top Management(no restriction)).
These groups are called in Firewall as the restriction level of internet is different and we control users internet access on these groups basis.

The problem occurs when I try to change a user's group. I go to dc , I remove it from let's say internet officer group and make it member of Top managment ,the group doesnot get updated on client's system , I ran whoami /group command on user system as a troubleshooting and ran"gpupdate /force" command, rebooted user system but it still shows the old Internet officer group by running "whoaam /group" command. When checked at firewall's end it was still authenticating from same old group however on domain controllers (ALL) it was showing updated group under user & groups user properties.

I want to ask as to why dc is not updating from previous group?

Kindly guide me .

Answer 1

I ran the command on my laptop and attached is the result.

Answer 2

From another computer with my login I can see that the updated group is updated please see below.

Answer 3

From My, System Group is not updated.

Answer 4

Have you checked the membership on domain controller ? Also please conform if you have restarted the affected system.

Answer 5

Is this looking Domain Replication issue?