Global vs Domain Local vs Universal: choosing an AD DS group scope
This sheet compares Global group, Domain Local group, Universal group.
| Criterion | Global group | Domain Local group | Universal group |
|---|---|---|---|
| Members can include | Accounts and other Global groups from the same domain only | Accounts, Global groups and Universal groups from any domain, including a trusted external forest; other Domain Local groups from the same domain | Accounts, Global groups and other Universal groups from any domain in the same forest |
The verdict, the full comparison, 4 rules and 3 traps are part of AZ-802 access. Unlock AZ-802.