After adding Criteria to the Scope you will notice that they are “Ungrouped” and therefore “combined with AND”. This means that Criteria will be evaluated and results will be combined with the AND operator.
In the example above the user must be a member of both ‘Domain Users’ and ‘Domain Admins’ for the Scope to produce ‘true’.
To act in more complex situations it is possible to group Criteria and let them be processed a little differently.
Criteria can be grouped by selecting at least two of them, clicking the right mouse button and choose ‘Group’ from the context menu.
After grouping these Criteria you will see a different header.
Now the Criteria are “Grouped” and “combined with OR”.
This means that Criteria are evaluated and if one of them produces ‘true’ the entire group will produce ‘true’.
In the example above the user must be a member of ‘Domain Users’ or ‘Domain Admins’ for the Scope to produce ‘true’.
Criteria can, of course, be ungrouped using the same context menu as shown previously.