universal groups are not present in the win2000 mixed mode the forest level needs to be win2003 for it to work.
Universal groups can be used anywhere in the same Windows forest. They are only available in a Native-mode enterprise. Universal groups may be an easier approach for some administrators because there are no intrinsic limitations on their use. Users can be directly assigned to Universal groups, they can be nested, and they can be used directly with access-control lists to denote access permissions in any domain in the enterprise.
Universal groups are stored in the global catalog (GC); this means that all changes made to these groups engender replication to all global catalog servers in the entire enterprise. Changes to universal groups must therefore be made only after a careful examination of the benefits of universal groups as compared to the cost of the increased global catalog replication load. If an organization has but a single, well-connected LAN, no performance degradation should be experienced, while widely dispersed sites might experience a significant impact. Typically, organizations using WANs should use Universal groups only for relatively static groups in which memberships change rarely
Windows 2000 Mixed: This is the default functional level
What are the domain functional level in Windows Server 2003
yes it is
Users.
There are four domain functional levels for Windows Server 2003: Windows 2000 mixed Windows 2000 native Windows Server 2003 interim Windows Server 2003
Windows Server 2003, Web Edition
dial up networking
Windows server 2003 SP2
Windows Server 2003, Data center Edition
Raise the Domain Functional Level for 2008 server Applies To: Windows Server 2008, Windows Server 2008 R2 When you install Active Directory Domain Services (AD DS) on a server running Windows Server 2008 R2, a set of basic Active Directory features is enabled by default. In addition to the basic Active Directory features on individual domain controllers, there are new domain-wide and forest-wide Active Directory features available when all domain controllers in a domain or forest are running Windows Server 2008 R2. For the new domain-wide features to be enabled, all domain controllers in the domain must be running Windows Server 2008 R2, and the domain functional level must be raised to Windows Server 2008 R2. Membership required: Domain Admins or Enterprise Admins To raise the domain functional level 1.Open Active Directory Domains and Trusts. To open Active Directory Domains and Trusts, click Start, click Administrative Tools, and then click Active Directory Domains and Trusts. 2.In the console tree, right-click the domain for which you want to raise functional level, and then click Raise Domain Functional Level. 3.In Select an available domain functional level, do one of the following: * To raise the domain functional level to Windows Server 2008, click Windows Server 2008, and then click Raise. * To raise the domain functional level to Windows Server 2008 R2, click Windows Server 2008 R2, and then click Raise. Caution Do not raise the domain functional level to a later version (such as Windows Server 2008 or Windows Server 2008 R2) if you have or will have any domain controllers running earlier versions of Windows Server. Important After you set the domain functional level to a certain value, you cannot roll back or lower the domain functional level, with one exception: when you raise the domain functional level to Windows Server 2008 R2 and if the forest functional level is Windows Server 2008 or lower, you have the option of rolling the domain functional level back to Windows Server 2008. You can lower the domain functional level only from Windows Server 2008 R2 to Windows Server 2008. If the domain functional level is set to Windows Server 2008 R2, it cannot be rolled back, for example, to Windows Server 2003.
1
Web server