Active Directory Question:

A global catalog server is a domain controller that, in addition to its full, writable domain directory partition replica, also stores a partial, read-only replica of all other domain directory partitions in the forest
Global group's membership is limited to accounts from the same domain. The membership is replicated in its own domain only.
Universal group's memership is limited to accounts from the same forest.The membership is replicated across the forest