• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 335
  • Last Modified:

What is the difference between the 3?

Ok, here is an image below, and i just wondered what is the difference between:
Domain local
when creating a distribution group.

Thanks for your help
1 Solution
bluntTonyHead of ICTCommented:
Domain Locals are used to grant access to resources in their own domain. E.g. create a DL group called Accounts_Files.
Global groups are then used to add the users into that you want to grant the access to, e.g. Accounts_Dept.
You then grant the Accounts_Dept the required access to the Account_Files group, thereby giving all the users access to them.
This is the MS best practice for group nesting.
Universal groups are used to grant various global groups access to various resources around multiple domains. You never place users into Universal group, only into globals, then place the globals into the universal.
It's also best practice to not put users into domain locals, again use globals.
Roy_Author Commented:
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now