Question: what is the difference between universal and global groups in active directory?
Answer: Global Groups can only have user accounts as members. Domain Local Groups can have other Global Groups and user accounts as members. Universal Groups cannot be created.