We help IT Professionals succeed at work.

Basics on global,domain local and universal groups 2003 server

Sid_F asked
Last Modified: 2012-06-27

Without sending me links to various sites can someone explain the basics of global, local, domain local and universal groups, my experience until now has only been with one 2003 domain controller and one domain name.

In general I create a global group, share a folder add the group to the folder assign permissions and then add what ever users I need to that group .. easy..

Where do domain local groups and universal groups come into play?

I take it local groups (as oppose to domain local groups) only apply to stand alone machines such as xp pro.

Watch Question

This one is on us!
(Get your first solution completely free - no credit card required)
Brian PiercePhotographer
Awarded 2007
Top Expert 2008
This one is on us!
(Get your first solution completely free - no credit card required)


That great infomation thanks Toniur and KCTS, my grey area is really what domain A and domain B can see, for example when I create two domains, domain A and domain B and establish a trust between the two domains, when I go to a.d users and computers then do I see all the accounts for both domains ?

So a global group should be created in each domain, then for instance if domain B had users that were part of lets say G-sales boston group and domain A  had a G-sales new york group with users from domain A in the group, if they all required access to a resource on domain A the thing to do would be to create a DL group on domain A and add the G-Sales boston and G sales new york to the DL group and assign permissions and because there has been a trust relationship established domain A should be able to see the global groups in domain B to allow the group to be added to the DL group?

Hope that all makes sense!

Toni UranjekConsultant/Trainer

Yes, user accounts and global groups from domain A are visible in domain B, if trust relationship is enabled. When selecting users of groups, you have to select the other domain's node.

Second part of your post is correct. That's exactly the way it works.


Thank you.

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.