Which of the following characteristics is true regarding universal groups? Select three.

• A. It can be a member of another universal group
• B. Changes to universal groups should be minimized
• C. It is the only group stored on global catalog servers
• D. Must contain at least one member from a domain

Answer: (A)

Universal groups are a specific type of group in Active Directory used for managing permissions and access across multiple domains. Understanding their characteristics helps clarify their role and functionality.

The first characteristic is that a universal group can indeed be a member of another universal group. This feature allows for greater flexibility and organization within the directory structure, enabling admins to create sophisticated group hierarchies. Such relationships can aid in managing permissions and resource access efficiently across the entire forest.

Minimizing changes to universal groups is advisable because alterations can have wide-reaching effects in a multi-domain environment. Making frequent changes can lead to replication traffic and potentially affect performance. However, it's not an inherent characteristic of universal groups.

Regarding global catalog servers, while universal groups are replicated and accessible from these servers, they are not the only types of groups stored there. Domain local groups and global groups are also stored in the global catalog, which provides a comprehensive view of objects in the Active Directory forest.

Lastly, universal groups do not have a strict requirement to contain at least one member from a domain, although they often have members from various domains. This allows for cross-domain groups, which is one of the advantages of using universal groups.

By knowing these points, one can see how the structure and interactions of universal