Setting up a trust between two domains, one is still in 2000-mixed mode, two-way external since forest trusts can't be done in mixed mode.
I have read that creating universal groups in the trusted domain and adding it to a domain local group in the trusting domain is the best way to assign permissions to resources. However, since we're stuck in Mixed mode for the time being, universal groups are unavailable.
Can I achieve the same thing with a global group in the trusted domain and assign it to a domain local in the trusting domain?
Also, what types of resources would I *not* want to assign permissions to with domain local groups?