Nesting in Mixed Mode
This topic lists the restrictions of security groups in a mixed-mode domain.
Security groups in a mixed-mode domain have the following restrictions:
- Universal groups cannot be created in mixed-mode domains because the universal scope is supported only in Windows 2000 native-mode domains.
- A global group can contain accounts from the same domain to which the group belongs. A global group cannot contain any universal groups, any global group, or an account from another domain.
- A domain local group can contain global groups and accounts from any domain or forest. A domain local group cannot contain any other domain local group.
Be aware that distribution groups can be nested according to the nesting rules for native mode.