Question: what is the difference between global and universal group scope?
Answer: A global group can be used to assign permissions for access to resources in any domain. ... The global scope can contain user accounts and global groups from the same domain, and can be a member of universal and domain local groups in any domain.