View Categories

Why am I not able to change the group scope in Active Directory?

< 1 min read

  1. Verify that you have the permissions required to change the group scope.

  2. You must have the following account permissions in order to change the group scope: Domain, Enterprise, and SchemeDelete Administer, or be a member of the Domain Admins or Enterprise Admins group to change the group scope.

  3. Verify whether the group is a universal scope group.

  4. Universal groups cannot be changed to global groups and global groups cannot be changed to universal groups.

  5. Verify the layout of the forest structure.

  6. You may not be able to change the group scope due to the layout of the forest structure in Active Directory.

Powered by BetterDocs