Group scopes

UniversalGroup can include as members: Accounts from any domain within the forest in which this Universal Group resides Global groups from any domain within the forest in which this Universal Group resides Universal groups from any domain within the forest in which this Universal Group resides Group can be assigned permissions in:Any domain or forestGroup scope can be converted to: Domain local Global (as long as no other universal groups exist as members)

GlobalGroup can include as members: Accounts from the same domain as the parent global group Global groups from the same domain as the parent global group Group can be assigned permissions in:Member permissions can be assigned in any domainGroup scope can be converted to:Universal (as long as it is not a member of any other global groups)

Domain localGroup can include as members: Accounts from any domain Global groups from any domain Universal groups from any domain Domain local groups but only from the same domain as the parent domain local group Group can be assigned permissions in:Member permissions can be assigned only within the same domain as the parent domain local groupGroup scope can be converted to:Universal (as long as no other domain local groups exist as members)

New Page