what is the difference between domain local global and universal?
The difference between domain local and global groups is that user accounts, global groups, and universal groups from any domain can be added to a domain local group. ... If the functional level is set to Windows 2000 mixed, then the domain local group can only contain user accounts and global groups from any domain.