Domain Local Universal And Global Groups
Rules that govern when a group can be added to another group different domain.
Domain local universal and global groups. Stored on the local sam local computer use for security. Members from any domain may be added. Universal security groups are most often used to assign permissions to related resources in multiple domains. The domain local scope can contain user accounts universal groups and global groups from any domain.
Domain local groups can grant access to resources on the same domain. Also you can use a. A domain local group cannot be nested within a global or a universal group. The reason being that you can add domain global and domain universal groups from any domain to a domain local group.
Members from any domain may be added to a domain local group. The global scope can contain user accounts and global groups from the same domain and can be a member of universal and domain local groups in any domain. The difference between domain local and global groups is that user accounts global groups and universal groups from any domain can be added to a domain local group. Domain local groups also have a scope that extends to the local domain and are used to assign permissions to local resources.