Microsoft Windows graphic

Nesting groups

Using nesting, you can add a group as a member of another group. You nest groups to consolidate member accounts and reduce replication traffic.

Nesting options depend on whether the domain functionality of your Windows Server 2003 domain is set to Windows 2000 native or Windows 2000 mixed.

Groups in domains set to the Windows 2000 native functional level or distribution groups in domains set to the Windows 2000 mixed functional level can have the following members:

Security groups in domains set to the Windows 2000 mixed functional level are restricted to the following types of membership:

Security groups with universal scope cannot be created in domains with the domain functional level set to Windows 2000 mixed because universal scope is supported only in domains where the domain functional level is set to Windows 2000 native or Windows Server 2003.

For more information about domain functionality, see Understanding domain and forest functionality.