Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

What is the basic difference between local, global and universal groups in Active Directory? What is the best practice when assigning users and groups to these groups?

share|improve this question
add comment

1 Answer 1

up vote 1 down vote accepted

The difference is which groups/users you can include in the different groups, which permissions can be assigned to that group, and if the group can be converted.

If you only have one domain and one tree, and you know it will stay that way forever, you really don't need to know a lot about this. But, i strongly encourage you to read this: http://technet.microsoft.com/en-us/library/cc755692%28WS.10%29.aspx

You will hate the person who set up groups in the first place if you ever have to fix their mistake. I've had to, and it is no fun.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.