what is the difference between a universal and global security group?
Global Groups can only have user accounts as members. Domain Local Groups can have other Global Groups and user accounts as members. Universal Groups cannot be created.