I'm still confused by the difference between Global Groups and Domain Local Groups

[Spin]

Experts,

I'm still confused by the difference between Global Groups and Domain Local
Groups. I mean, they seem to me to accomplish the very same thing: Both
are domain-wide entities which can give users access to resource
domain-wide.

[Keith W. McCammon]

The main difference is related to the manner in which groups can or cannot
be distributed and/or joined to other groups within affiliated domains.
Check this out:

[url]http://support.microsoft.com/default.aspx?scid=kb;EN-US;231273[/url]

"Spin" <spin@spin.com> wrote in message news:2irc6hFq3bl2U1@uni-berlin.de...

> Experts,
>
> I'm still confused by the difference between Global Groups and Domain

Local

> Groups. I mean, they seem to me to accomplish the very same thing: Both
> are domain-wide entities which can give users access to resource
> domain-wide.
>
>

[Laura E. Hunter \(MVP\)]

Not quite.

Global groups can contain:
* Groups and accounts that reside in the same domain
Global groups can be assigned permissions to:
* Any object in any domain in the forest

Domain local groups can contain:
* Accounts, global and universal groups from any domain, and domain
local groups from the same domain.
Domain local groups can be assigned permissions to:
* Any object in the same domain

Groups with domain local scope help you define and manage access to
resources within a single domain. These groups can have as their members:

a.. Groups with global scope
b.. Groups with universal scope
c.. Accounts
d.. Other groups with domain local scope
e.. A mixture of any of the above
Use groups with global scope to manage directory objects that require daily
maintenance, such as user and computer accounts. Because groups with global
scope are not replicated outside of their own domain, accounts in a group
having global scope can be changed frequently without generating replication
traffic to the global catalog.

[url]http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/sag_ADgroups_3groupscopes.asp[/url]

--
******************************
Laura E. Hunter - MCSE, MCT, MVP
Replies to newsgroup only


"Spin" <spin@spin.com> wrote in message news:2irc6hFq3bl2U1@uni-berlin.de...

> Experts,
>
> I'm still confused by the difference between Global Groups and Domain
> Local
> Groups. I mean, they seem to me to accomplish the very same thing: Both
> are domain-wide entities which can give users access to resource
> domain-wide.
>
>