Security groups in a mixed-mode domain can contain only the following:
Note that distribution groups can be nested according to the nesting rules for native mode.