changing group scope

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

not sure if this is the right group, but I'll give it a try.

from
http://technet2.microsoft.com/WindowsServer/en/Library/79d93e46-ecab-...



Changing group scope
When creating a new group, by default, the new group is configured as a

security group with global scope regardless of the current domain
functional level. Although changing a group scope is not allowed in
domains with a domain functional level set to Windows 2000 mixed, the
following conversions are allowed in domains with the domain functional

level set to Windows 2000 native or Windows Server 2003:


· Global to universal. This is only allowed if the group you want to
change is not a member of another global scope group.


· Domain local to universal. This is only allowed if the group you
want to change does not have another domain local group as a member.


· Universal to global. This is only allowed if the group you want to
change does not have another universal group as a member.


· Universal to domain local. No restrictions for this operation.


My question is about the last "Universal to domain local" which it says

there are no restrictions. What happens if the universal group you want

to convert to domain local is a member of another universal group? This

would cause the containing universal group to have a domain-local group

as a member. If there are no restrictions, wouldn't this cause issues
because a universal group cannot contain domain local groups?

.

Relevant Pages

  • Re: changing group scope
    ... Changing group scope ... · Domain local to universal. ... want to change does not have another domain local group as a member. ... change does not have another universal group as a member. ...
    (microsoft.public.cert.exam.mcse)
  • Changing group scope
    ... Changing group scope ... change is not a member of another global scope group. ... want to change does not have another domain local group as a member. ... change does not have another universal group as a member. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Long time taking for Single user to logon
    ... only reply to Newsgroups ... Any chance that the user is member of an Universal Group? ... All users login to the domain normally but for a single user it ...
    (microsoft.public.windows.server.active_directory)
  • Re: Message bouncing between two servers
    ... Basically she is a member of a group that is nested in one that sends to the ... (ie. departmental universal group, nested within company ... send to the company universal group. ... all refer to the SMTP connector/smart host problems, ...
    (microsoft.public.exchange.admin)
  • Re: Secondary (backup) domain controller not working ?
    ... No I am not using Universal group. ... Do you use Universal groups and are the accounts member of them? ... If i startup a client when the preferred DNS is down i don't have any delay realized. ...
    (microsoft.public.windows.server.active_directory)