Mastering Active Directory - Second Edition

Converting groups

Group scope needs to be defined during the group setup process. But with operational requirement or infrastructure changes, there can be occasions where the existing scope is not valid anymore. In such a situation, instead of setting up a new group, we can change the group scope. However, it doesn't mean you can change the existing group scope to any. There are some rules to follow. The following table explains supported ways to convert a group:

Group scope	Domain Local	Global	Universal
Domain Local	N/A	X	Yes (only if there are no other Domain Local groups as members)
Global	X	N/A	Yes (only if it's not a member of other Global groups)
Universal	Yes	Yes (only if there are no other Universal groups as members) ...