I am aware of the "AGDLP" rule of thumb when it comes to group nesting inside an AD strcture. But now I am wondering if there are any best practises when it comes to adding Active Directory groups to "computer"-local groups.
Let's assume i got a server named HOST_A which is running the Remote Desktop Server role. And I would like to manage the group of people having access to it via an AD group.
I would therefor create a domain-local group let's say "P_RemoteDesktopUsers_Host_A" and make it a member of the computer-local group called "Remote Desktop Users".
Or should i choose a global group scope? If so, why?