You are the systems administrator for a medium-sized Active Directory domain.
Currently, the environment supports many different domain controllers, some of which are
running Windows NT 4 and others that are running Windows 2003 and Server 2008 R2.
When you are running domain controllers in this type of environment, which of the following
types of groups can you not use? (Choose Two)

A.
Universal security groups

B.
Global groups

C.
Domain local groups

D.
Computer groups

Explanation:
http://support.microsoft.com/kb/231273
Group Type and Scope Usage in Windows
Windows 2000 and later extends the Microsoft Windows NT 4.0 concept of user groups by
adding Universal and Distribution groups. In Windows NT 4.0, there are only Global and
Local groups, and both are considered Security groups.