Question: what is difference between local and universal groups?
Answer: The difference between domain local and global groups is that user accounts, global groups, and universal groups from any domain can be added to a domain local group. Because of its limited scope, however, members can only be assigned permissions within the domain in which this group is created.