MCITP: Windows Server® 2008 Enterprise Administrator, Study Guide

5.4. Group Scope

Whenever you create a group in Windows Server 2008, whether that group is a security group or a distribution group, the group is defined somewhere within the Active Directory forest. And that scope, once defined, shows the limitations of that group and where it can reach within the forest. When you create a group in Windows Server 2008 using the Active Directory Users and Computers tool, Windows Server presents you with three different choices of scope for your security groups if you are running in native mode: domain local, global, and universal. If you are not running native mode and are instead running in mixed mode, you will have access to two groups: domain local and global.

NOTE

You can see a good example of group scope ...