Group scopes - how to remember...

I'm ok about the differences between security and distribution, but Im struggling to remember how each type of group scope (local, global and universal) works, what they can contain, and how to change their type.
This technet article gives me the answers I need, but how can I possibly remember all that?
http://technet2.microsoft.com/WindowsServer/en/Library/79d93e46-ecab-4165-8001-7adc3c9f804e1033.mspx
Is there an easy way to remember this for the exam?
thanks
Martin
This technet article gives me the answers I need, but how can I possibly remember all that?
http://technet2.microsoft.com/WindowsServer/en/Library/79d93e46-ecab-4165-8001-7adc3c9f804e1033.mspx
Is there an easy way to remember this for the exam?
thanks
Martin
Comments
Apart from putting things in practice, it's often good to read it again, but from a different author, in this case yours truly:
I had to setup my test lab so that I had two domains, the second initially running in Mixed mode before upping the Domain level to 2000/2003. I certainly remember it much clearer than I ever have and it's because I've now done it.
I know I am going to have to do it all a few more times as well to try and keep it in my head, otherwise I will have forgotten it all again by Monday!
Domain local, Universal and global you will need to understand how they work. Once you get that down its easy.
There is a great CBT nugget for this topic.
Universal can contain user/groups from all domains and can be given permissions in all domains
Global can contain members from one domain but can be given permission to all domains
Domain local can contain members from all domains but can only be given permissions in one domain.
obviously there is more like which functional level allows nesting, dist to security change, etc... and which level allows which groups, but i believe the above info would be a good base to work from. anyone correct me if i am wrong.