Membership in Account Operators, Domain Admins, or Enterprise Admins, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at http://go.microsoft.com/fwlink/?LinkId=83477.

To modify group type or group scope using Active Directory Administrative Center

  1. To open Active Directory Administrative Center, click Start, click Administrative Tools, and then click Active Directory Administrative Center.

    Note

    Another way to open Active Directory Administrative Center is to click Start, click Run, and then type dsac.exe.

  2. In the navigation pane, select the node that contains the group whose type or scope you want to modify.

  3. In the management list, right-click the group whose type or scope you want to modify, and then click Properties.

  4. In the Group section, do one of the following:

    • To modify group type, under Group type, click the group type.

    • To modify group scope, under Group scope, select the group scope.

Additional considerations

  • You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click Start, click Administrative Tools, and then click Active Directory Module for Windows PowerShell. For more information, see Modify Group Type or Group Scope (http://go.microsoft.com/fwlink/?LinkId=141712).

    For more information about Windows PowerShell, see Windows PowerShell (http://go.microsoft.com/fwlink/?LinkID=102372).

  • To modify group type or group scope, the domain functional level must be set to Windows 2000 native or higher. You cannot modify group type or group scope when the domain functional level is set to Windows 2000 mixed.

  • You can change the scope of a group from universal to domain local only on a global catalog server. An error message appears if the domain controller is not a global catalog server.

Additional references

  • Add a Member to a Group
  • Move a Group