Active Directory Groups

Types of groups

Group scope



Domain Local

(Builtin Local)

group scope members member of permissons
universal from same forest in same or trusting forest:
universal group,
domain local group,
local group
in same or trusting forest
global from same domain universal group (in same forest),
global group (same domain),
domain local group (same or trusting forest)
in same or trusting forest
domain local from any domain domain local group (same domain),
local group (excluding built-in with well-known SID)
in same domain