Question: In an auto-zone, when user groups are configured in both the auto.schema.allow.groups and nss.group.override files, why are they not listed in the output after running "adquery user" on the server?
Answer: For any groups specified in auto.schema.allow.groups, the group override feature is not permitted. All groups subsequently identified in nss.group.override are skipped over and will not be listed by adquery results nor receive logon access to the server.