AD Local Domain groups, Global groups and Universal groups

http://ss64.com/nt/syntax-groups.html

Rules that govern when a group can be added to another group (same domain):

- Global groups can be nested within Domain Local groups, Universal groups and within other Global groups in the same domain.

- Universal groups can be nested within Domain Local groups and within other Universal groups in any domain.

- A Domain Local group cannot be nested within a Global or a Universal group.

 

转载于:https://www.cnblogs.com/IvanChen/p/5445247.html