What is the difference between the 3?

Posted on 2009-04-30
Last Modified: 2012-05-06
Ok, here is an image below, and i just wondered what is the difference between:
Domain local
when creating a distribution group.

Thanks for your help
Question by:Roy_
    LVL 27

    Accepted Solution

    Domain Locals are used to grant access to resources in their own domain. E.g. create a DL group called Accounts_Files.
    Global groups are then used to add the users into that you want to grant the access to, e.g. Accounts_Dept.
    You then grant the Accounts_Dept the required access to the Account_Files group, thereby giving all the users access to them.
    This is the MS best practice for group nesting.
    Universal groups are used to grant various global groups access to various resources around multiple domains. You never place users into Universal group, only into globals, then place the globals into the universal.
    It's also best practice to not put users into domain locals, again use globals.

    Author Comment


    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    My last post dealt with using group policy preferences to set file associations, a very handy usage for a GPP. Today I am going to share another cool GPP trick, this may be a specific scenario but I run into these situations frequently in my activit…
    Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now