You can use this recipe to change the scope and/or type of a group in Active Directory.
Changing the scope or type of a group
Getting ready
To manage a group, you should sign in to a domain controller, a member server, and/or a device with the RSAT for Active Directory Domain Services installed.
Sign in with an account that is a member of the Domain Admins group, the Account Operators group, or with an account that is delegated to manage groups in the domain or in the scope of the OU.
How to do it...
There are four ways to manage group memberships in Active Directory,...