Active Directory Groups

Types of groups

Security group: für Rechtevergabe für Ressourcen (Ordner, Dateien, ...)
Distribution group: für E-Mail-Verteiler

Group scope

Universal

members (from same forest): accounts, global groups, universal groups
member of (in same or trusting forest): universal group, domain local group, local group
permissons: in same or trusting forest

Global

members (from same domain): accounts, global groups
member of: universal group (in same forest), global group (same domain) domain local group (same or trusting forest)
permissons: in same or trusting forest

Domain Local

members: accounts (any domain), global groups (any domain), universal group (same forest), domain local group (same domain)
member of: domain local group (same domain), local groups (excluding built-in with well-known SID)
permissons: in same domain

(Builtin Local)

group scope	members	member of	permissons
universal	from same forest	in same or trusting forest: universal group, domain local group, local group	in same or trusting forest
global	from same domain	universal group (in same forest), global group (same domain), domain local group (same or trusting forest)	in same or trusting forest
domain local	from any domain	domain local group (same domain), local group (excluding built-in with well-known SID)	in same domain