A global group can appear on access control lists (ACLs) anywhere in the forest. A global group can contain users and other global groups from its own domain.An unchangeable 128-bit number that uniquely identifies an object. It works in conjunction with SIDs to identify Active Directory objects.