What are the differences between, domain local, domain global and domain universal groups?
Global Groups
Global security groups used to organize users who share similar network access requirements. Members of the global group can only come from the local domain in which you create the global group. Members of the global group can access resources in any domain in the tree or forest.
Domain Local Groups
Domain local security groups are most often used to assign permissions to resources such as printers or shares. Members of the domain local group can come from any domain but they can only access resources in the same domain where the domain local group was created
Universal Groups
The universal group is usually used to assign permissions to related resources in multiple
domains. Members can come from any domain and they can have access to resources that are located in any domain in the forest. Domain functional level has to be at least set to Windows 2000 native or Windows Server 2003.
See Also:
Windows Authentication Troubleshooter
Active Directory Group Policy Client Extensions
Troubleshooting Windows User Profiles
Useful Links for Troubleshooing Active Directory
Howto Force AD Software Deployment Policies at Logon
How to Troubleshoot Active Directory Software Deployment Problems
Active DirectoryActive Directory
Filed under: Active Directory
One Response to “What are the differences between, domain local, domain global and domain universal groups?”
Leave a Reply