Groups are very understanding, and different types of simple, can be frustrating in the scope of the Group, Windows Server 2003 Active Directory and new work. The scope of the group, the group is to identify the range that applies to the entire domain tree or forest. 4 is a scope to a group:

Local Groups
Local groups can contain user accounts from the local machine, local machine, or user accounts, user accounts from a domain that is trusted domain from any domain that are registered members in the car joined. The only local group (for a single machine) can control the local access local resources.

Domain Local Groups
Other user groups and domain local groups / Windows Server 2003 is, Windows 2000 Server computer account, and can include Windows NT domain. The only access to a domain that is defined as a group can be assigned to a domain local group.

Global Group
Other user groups and global groups / computer account, you can include only the domains that are defined for the group. You can assign permissions to global groups on any domain in the forest.

Universal Group
Universal groups and other groups of users / computer accounts, you can include any domain in the domain tree or forest. Universal groups can be assigned permissions in any domain in the domain tree or forest. Only universal group, domain functional level is available for Windows 2000 is set to native mode.